SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

How a remote MCP server handles OAuth: what MCP clients actually check

0
·2 views

A team running a reviews API behind a remote MCP server, letting clients like Claude, Cursor and VS Code read and reply to reviews across 84 platforms, describes how it made connections work without a pasted API key. Clients discover the login flow by calling the server unauthenticated and reading the 401 response's WWW-Authenticate header, which must be exposed to browsers via CORS. The team deliberately kept the MCP endpoint closed, publishing its tool list as a static server card instead, since a 200 on the first call would make clients skip OAuth. Client registration is stateless: client IDs are HMAC-signed registrations, and authorization codes are encrypted, five-minute, single-use PKCE grants. Access tokens appear as named API keys that users can revoke to disconnect a client, and redirect URIs are validated against a strict allowlist of schemes and hosts.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

RupayaTools Offers Free, Sign-Up-Free Calculators Built for Indian Students and Job Seekers

A developer built RupayaTools, a free website of online tools designed for users in India. The site offers no-account, no-download utilities such as CGPA, SGPA, and percentage calculators aligned with CBSE and university grading. It also includes salary, EMI, and income-tax calculators, along with age calculators and unit converters. All tools run in the browser, so user data stays on the device, and the creator says the site is free with no paywall.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Stock Scorer Shows Negative Predictive Power in A-Share Backtest

A developer built a three-pillar scoring model for Chinese A-shares, combining technical, volume/price, and valuation signals to rank stocks and select the top 50. When audited against 70 rebalance dates and 587 stocks, the composite score showed a significantly negative rank information coefficient, meaning higher scores tended to precede lower returns. Two of the three pillars had negative IC values, and the only positive one came from the component labeled fundamental, which the author suspects is mislabeled. Decile analysis reinforced the finding, as the highest-scoring stocks underperformed the lowest-scoring ones over the five-day horizon. The author used the same shipped code in the audit rather than a rewritten version, and noted that the results are not perfectly monotonic and occurred during a falling market window.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Maruti Suzuki's quarterly margin figures differ by measure, not by error

Maruti Suzuki's July–September 2026 results drew different margin figures from different outlets, including 5.9%, 5.5%, and 8.9%. The variation comes from measuring profit at different levels: EBITDA counts only running costs, EBIT also deducts depreciation, and pre-tax margin further adjusts for interest and other income. Maruti's large cash holdings lift its other income, which is why its pre-tax margin sits above its EBIT margin. The author notes that Indian filings are not uniformly labelled, so the platform standardised on pre-tax profit divided by sales for all Indian stocks. The piece argues that data should always be shown alongside the name of the measure used.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

RechnerGenie Launches Free, Privacy-First Calculator Suite Running Entirely in the Browser

RechnerGenie.de is a new free calculator platform designed to process all computations locally in the user's browser rather than on remote servers. The site's developers say this approach delivers instant feedback, keeps sensitive financial and academic inputs private, and avoids cookie consent popups by skipping third-party trackers. Its algebra tool offers a formula editor with live KaTeX rendering and a photo scanner that uses client-side OCR to read formulas from images. Additional modules cover Austrian and German net salary calculations, proportions, unit conversions, percentages, and working-hour tracking.

0 comments Read more at DEV Community