Thread

1. SkyPuncher · 1790872062 · focus · HN ↗

   I do security review for my company. I suspect this is a means of containing OAuth redirect vulnerabilities. We basically needed to do the same thing with our MCP server.

   The security problem is two fold: (1) companies want control over where their data goes. Figma allowing any MCP creates problems (2) open redirects can create phishing issues. If your using Pi, you’re probably thinking of this. Most users aren’t.

   For us, we decided to do an allowlist pattern because it was a reasonable tradeoff. The solution is allowing per-tenant client configuration, but that comes with its own set of issues (dev time, support, maintenance, etc). When nearly all of the money is flowing through a handful of well-known MCPs there’s little reason to out effort into supporting every MCP.

   1. dbuxton · 1790876650 · focus · HN ↗

      It’s not a very good way of doing that though. Rather than constraining the callback url to pre-registered partners, you just need to enter “Claude Code” as your product name and it lets you in.

      1. htrp · 1790880091 · focus · HN ↗

         you're not being sarcastic here?

         1. pjm331 · 1790881293 · focus · HN ↗

            callback urls are all localhost, there’s no domain to whitelist, just client names

Unofficial Hacker News client; not affiliated with Y Combinator.