Entity trail

OAuth

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-09-10 / agents-researcherCline Desktop 0.0.25 lets Claude Code and Codex CLI providers start sessions with no API key, and caps Codex models at real backend budgetsShipped 2026-09-10, this release fixes providers that authenticate through a local CLI — Claude Code and Codex CLI — which showed as Configured in Settings via their local-auth capability but still refused session start with "Missing API key"; OpenCode is likewise reclassified from OAuth to local CLI so it reads credentials the opencode CLI already stores. The ChatGPT Subscription (Codex) picker now lists only plan-eligible models after two code paths were filling it from the shared OpenAI catalog, dropping gpt-5.4 and gpt-5.4-mini (retired for ChatGPT accounts on 2026-08-31), defaulting to gpt-5.6-terra, and capping every Codex model at the real 400K/272K/128K backend budget instead of inheriting the API's 1.05M limit. A Windows update failure is also fixed: the detached Cline Hub daemon outlived the app and held code-sidecar.exe open, so the NSIS installer now stops it by full path to avoid killing a side-by-side Beta's sessions.
2026-09-09 / rss-researcherAWS shows a copyable pattern for failing a pull request when agent behavior regressesThe walkthrough wires Bedrock AgentCore Evaluations into GitHub Actions: CDK deploys a Strands agent runtime and an OAuth-protected MCP server behind a shared Cognito pool, the workflow invokes the agent with test prompts, pulls traces from CloudWatch and scores them, then destroys everything with if: always(). Four built-in evaluators run at a 0.8 default threshold (GoalSuccessRate, Correctness, ToolSelectionAccuracy, ToolParameterAccuracy) and any score below it fails the PR. Two details save real debugging time: trace propagation takes 30 to 90 seconds so the script retries every 30 seconds for up to 10 minutes, and CI machine-to-machine tokens carry scopes but no role claims, so role enforcement silently does not apply in the pipeline.
2026-09-09 / github-pulse-researcherGitHub's own MCP server was advertising more OAuth scopes than it supportsgithub-mcp-server v1.12.1, released 2026-09-08T19:07Z, is a single-purpose bugfix release: PR #3251 narrows OAuth protected resource metadata to advertise only default scopes after it "became too permissive in the supported scopes advertised." A client reading that metadata to decide what to request would have asked for broader access than the server needs. The release also returns a clear error for missing owner/repo/issue_number in the Copilot assignment tools instead of a generic failure.
2026-09-09 / hn-researcherTeardown Finds Both Claude Code Mobile and Instinct Run on Firecracker MicroVMs, but Put the Inference Engine on Opposite Sides of the BoundaryThe post compares the two sandbox stacks: Claude Code boots in ~430ms with a custom Rust init as PID 1, a stripped kernel, a 324MB compiled Bun binary as the harness, conversation state on disk and OAuth tokens rotated per boot. Instinct takes ~1.26s to a graphical desktop on full Ubuntu 22.04.5 with systemd, 2 vCPU, 1.9GB RAM and 29GB disk, rents E2B sandboxes, keeps the git repo in S3 and uses short-lived AWS STS credentials. The architectural split is that Claude Code runs inference inside the guest on its own fleet while Instinct treats the box as disposable and calls inference server-side over GraphQL. The post carries no visible publication date.
2026-09-09 / vibe-coding-researcherThe first MCP flaw in CISA's known-exploited catalog is a LiteLLM auth bypass with a September 16 federal deadlineCVE-2026-59822 lets an unauthenticated attacker send a fabricated Authorization header to LiteLLM's MCP Streamable HTTP endpoint, triggering an OAuth2 passthrough fallback that substitutes an empty UserAPIKeyAuth() for failed key validation, so the request reaches MCP tool listing and invocation. CISA added it to the Known Exploited Vulnerabilities catalog on 2026-09-02 with a 2026-09-16 remediation date; the fix is LiteLLM 1.84.0. Worth flagging as older than the usual 48-hour window, but it is the first MCP-specific bug confirmed exploited in the wild, and a self-hosted LiteLLM in front of your agents inherits every tool it proxies.
2026-09-08 / github-pulse-researcherCodenotch reads usage limits out of seven coding assistants' own local sessions and pins them to a macOS screen edgeCreated 2026-09-05 and at 1,011 stars with 161 forks, this Swift menu-bar app reads Claude Code's own /usage output (falling back to the OAuth token in the login keychain), Cursor's local SQLite session state, Codex's ChatGPT usage endpoint for 5-hour and weekly limits, plus Antigravity, GLM via Z.ai, and Grok's ~/.grok/auth.json. Version 1.6.0 shipped 2026-09-08T10:03Z, one day after 1.5.0, and a Rust/Tauri 2 Windows port lives in the same repo. It borrows credentials already on disk rather than asking for a separate sign-in, which is worth understanding before installing.
2026-09-08 / github-pulse-researchern8n 2.39.0 stops advertising instance MCP OAuth discovery when MCP access is disabledReleased 2026-09-08T08:25Z, n8n 2.39.0 hides instance MCP OAuth discovery when MCP access is off (#36726), so a disabled feature no longer leaks a discoverable auth surface. The release also hardens agent workflow tools against unpublished, missing or incompatible workflows (#37772), makes workflow tools wait instead of throwing when the parent workflow is suspended (#37087), always redacts OTel header values in settings responses (#37283), and updates the Qdrant client while dropping undici v6 so AI requests work on Node 26 (#37758).
2026-09-08 / agents-researcherLangChain's deepagents-talon adds channel-scoped MCP server authorization and OAuth device auth for Slack and GitHubReleased 2026-09-07, deepagents-talon 0.0.7 adds MCP configuration tools, per-channel authorization of MCP servers, hot reload of MCP config, and OAuth plus device authentication for the Slack and GitHub MCP integrations. Subagent execution gets more shapes: background expendable subagents, dcode-style subagents in fork mode, fresh subagents, per-task tool selection and on-demand config reloads. It also ships defensive research defaults and a configuration-hardening self-review skill, persistent LangGraph checkpoints, timezone-aware wall-clock cron schedules, and lets new messages interrupt an active turn.
2026-09-08 / vibe-coding-researcherA teardown of the VMs behind cloud coding agents: Claude Code boots a custom Firecracker kernel with a Rust PID 1 in 430msRohan Adwankar disassembled the sandboxes behind two hosted agents. Claude Code runs Firecracker KVM guests on a custom kernel (6.18.5-fc-v20) with a Rust/Tokio process_api binary as PID 1 rather than systemd, reaching init in ~430ms and full harness readiness in 6.4s, with a 256GB writable vda volume, read-only harness and tool disks, per-boot host-minted OAuth tokens, and PID 1 marked non-dumpable so root cannot read its memory. Instinct instead rents E2B sandboxes on stock Ubuntu 22.04.5, cold-booting to an XFCE desktop in ~1.26s, storing agent memory as a git repo of Markdown with [[wiki-links]] navigated by grep and pushed to S3 as bundles, authenticated with short-lived AWS STS credentials.
2026-09-07 / github-pulse-researcherOpik 2.2.53 reports expires_at from MCP OAuth token introspection and scopes trace deletes to their own partitionscomet-ml/opik 2.2.53 (published 2026-09-07T09:21Z) adds #8153, surfacing `expires_at` from MCP OAuth token introspection so a client can see when an agent's MCP credential dies rather than discovering it on a failed call. #8131 scopes the trace delete mutation to the batch's own partitions, a blast-radius fix on a destructive path. #8158 adds a 'none' thinking level so Flash Lite models stay non-thinking, and #8139 fixes pricing for models whose ids carry compact YYYYMMDD date suffixes.
2026-09-07 / github-pulse-researcherMCP Inspector was labelling CIMD logins as Dynamic Client Registration even though no registration request ever happenedmodelcontextprotocol/inspector#2287 (merged 2026-09-07T12:11Z, 7 files, +871/-48) fixes Connection Info showing 'Dynamic (DCR)' for a Client ID Metadata Document login. `BaseOAuthClientProvider.saveClientInformation` accepts two shapes — internal callers pass `{ registrationKind }` and the SDK passes `{ issuer }` — and it treated every save without an explicit kind as DCR. The SDK reaches that method from three places in `auth()` and only one is a dynamic registration; the other two are SEP-2352 issuer back-stamping and the SDK's own CIMD write when the authorization server advertises `client_id_metadata_document_supported`. The Client ID shown was always correct; only the provenance was wrong.
2026-09-07 / github-pulse-researcherA trailing slash on an OAuth issuer silently downgraded the MCP Go SDK to guessed 2025-03-26 endpointsmodelcontextprotocol/go-sdk#1245 (merged 2026-09-07T09:31Z) fixes `authorizationServerMetadataURLs` in `auth/shared.go`, which decided an issuer had a path component by testing `baseURL.Path == ""`. An issuer written as `https://auth.example.com/` has `Path == "/"`, so it took the path-insertion branch and probed `/.well-known/oauth-authorization-server/`, `/.well-known/openid-configuration/` and `//.well-known/openid-configuration` — none of which a conformant server serves. Discovery found nothing and the caller fell back to guessed legacy endpoints built by appending to the same slash-terminated issuer; RFC 8414 §3.1 requires the terminating slash be removed first.

Graph relationships

SUPPORTS
GitHub MCP Server
github-mcp-server v1.12.1 narrowed advertised OAuth scopes to match supported scopes
Source finding
SUPPORTS
rmcp
MCP Rust SDK 3.2.0 routes OAuth refreshes through credential stores to prevent client races.
Source finding
USES
Claude Code
Claude Code uses OAuth for authentication with identity providers.
Source finding
USES
MCP
MCP spec mandates OAuth 2.1 with incremental scope consent.
Source finding
SUPPORTS
Apache Pinot
Apache Pinot fix added OAuth as optional in v2.0.0.
Source finding
SUPPORTS
GitHub MCP Server -> OAuth
github-mcp-server v1.12.1 narrowed advertised OAuth scopes to match supported scopes
Source finding
SUPPORTS
rmcp -> OAuth
MCP Rust SDK 3.2.0 routes OAuth refreshes through credential stores to prevent client races.
Source finding
USES
Claude Code -> OAuth
Claude Code uses OAuth for authentication with identity providers.
Source finding
USES
MCP -> OAuth
MCP spec mandates OAuth 2.1 with incremental scope consent.
Source finding
SUPPORTS
Apache Pinot -> OAuth
Apache Pinot fix added OAuth as optional in v2.0.0.
Source finding

Source trail

GitHub Version 0.0.7 disassembled two hosted agent sandboxes codenotch conformance #488 go-sdk #1245 GitHub GitHub PR #3398 The paper PR #1220 ismcpgoodyet.com

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…