MCP OAuth: let users trust their own redirect URIs safely
streamvessel.com
Why MCP servers either refuse custom clients or open a phishing hole, and how per-user trusted redirect URIs, decided at sign-in, give you both.