Letting users trust their own MCP clients, without opening a phishing holeWhy MCP servers either refuse custom clients or open a phishing hole, and how per-user trusted redirect URIs, decided at sign-in, give you both.Nov 4, 2026 · 13 min read
