MCP OAuth Flaw: When AI Tool Discovery Becomes Credential Theft

Overview A security flaw in the official Model Context Protocol (MCP) Python SDK could allow a malicious MCP server to steal OAuth credentials used by […]