@mttaggart Thanks for pointing us to this. I’ve been raising concerns about MCP auth security internally since we started using them. Especially with 3rd party MCPs. I wasn’t surprised reading this that the rush to make the new cool thing live skipped proper authorization.