Skip to content

mcp_schema: auth/session-aware fingerprinting for OAuth-gated listings #105

Description

@blitzcrieg1

Why

r/mcp feedback (2026-08): tools/list is a property of the session, not only of the build. Many servers return a reduced set (or nothing) until OAuth completes. The same unchanged release yields different digests depending on whether the token was live when the session started.

If the fingerprint is not keyed (or at least annotated) on auth principal / auth state as well as server identity, expired credentials become the loudest rug pull. Per-user gateway filters have the same shape.

Proposal

Design how mcp_schema events and the store key identity when the listing is auth-dependent. Options to evaluate (not decided):

  • Annotate events with auth state without putting tokens in the trail
  • Separate baselines per principal where the listing is filtered
  • Suppress or downgrade digest moves that coincide with auth failure / re-login

Acceptance

Expired OAuth and per-user filtered listings do not page as AML.T0109-shaped rug pulls by default.

Source

https://www.reddit.com/r/mcp/comments/1vvinyo/

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions