Hacker News AIT2·68 pts
- The redirect URI allowlist in standard MCP OAuth blocks integration of self-built agents.
- Stream Vessel introduces a user-side trust verification mechanism to balance security and openness.
- Developers can test custom client authorization flows via `https://mcp.streamvessel.com`.