The Hacker News

Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.
Arabian Post

MCP Python SDK patches high-risk OAuth credential flaw

Maintainers of the Model Context Protocol Python SDK have patched a high-severity OAuth weakness that could let a malicious MCP server steal authentication ...

What to do if Claude's MCP shows 'Connection closed' — How to revert using --with "mcp<2" if the cause is mcp 2.0 (uvx/uv tool measurements)

This article is for those whose MCP servers configured in Claude Desktop or Claude Code stopped connecting one day after the end of July 2026. It targets Python-based servers launched with "command": ...

Waste of tools passed to AI, now 3 can be eliminated with Claude's new SDK

When you give an AI tools, the tool descriptions themselves become part of every transmission. The names, descriptions, and ...

MCP's new spec turns a planted prompt into a stolen credential

MCP is now stateless at the protocol level. The Mcp-Session-Id header and the initialize/initialized handshakes that linked clients to specific server instances have been removed. The protocol version ...
Infosecurity Magazine

Secure Practices for Using MCP Servers: What You Need to Know

Explore how Model Context Protocol (MCP) is transforming AI-driven identity and security automation, and learn the best practices for mitigating risks ...