Why
r/mcp feedback (2026-08): tools/list is a property of the session, not only of the build. Many servers return a reduced set (or nothing) until OAuth completes. The same unchanged release yields different digests depending on whether the token was live when the session started.
If the fingerprint is not keyed (or at least annotated) on auth principal / auth state as well as server identity, expired credentials become the loudest rug pull. Per-user gateway filters have the same shape.
Proposal
Design how mcp_schema events and the store key identity when the listing is auth-dependent. Options to evaluate (not decided):
- Annotate events with auth state without putting tokens in the trail
- Separate baselines per principal where the listing is filtered
- Suppress or downgrade digest moves that coincide with auth failure / re-login
Acceptance
Expired OAuth and per-user filtered listings do not page as AML.T0109-shaped rug pulls by default.
Source
https://www.reddit.com/r/mcp/comments/1vvinyo/
Why
r/mcp feedback (2026-08): tools/list is a property of the session, not only of the build. Many servers return a reduced set (or nothing) until OAuth completes. The same unchanged release yields different digests depending on whether the token was live when the session started.
If the fingerprint is not keyed (or at least annotated) on auth principal / auth state as well as server identity, expired credentials become the loudest rug pull. Per-user gateway filters have the same shape.
Proposal
Design how mcp_schema events and the store key identity when the listing is auth-dependent. Options to evaluate (not decided):
Acceptance
Expired OAuth and per-user filtered listings do not page as AML.T0109-shaped rug pulls by default.
Source
https://www.reddit.com/r/mcp/comments/1vvinyo/