Letting users trust their own MCP clients, without opening a phishing hole
15 points by isalexlog
MCP servers typically either reject custom clients to maintain security or risk creating phishing vulnerabilities. Implementing per-user trusted redirect URIs determined at sign-in allows for a solution that enables user trust in their own clients while preventing security risks.