René's URL Explorer Experiment


Title: SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses by EmLauber · Pull Request #2468 · modelcontextprotocol/modelcontextprotocol · GitHub

Open Graph Title: SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses by EmLauber · Pull Request #2468 · modelcontextprotocol/modelcontextprotocol

X Title: SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses by EmLauber · Pull Request #2468 · modelcontextprotocol/modelcontextprotocol

Description: Specification and documentation for the Model Context Protocol - SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses by EmLauber · Pull Request #2468 · modelcontextprotocol/modelcontextprotocol

Open Graph Description: Proposes requiring the inclusion and validation of an explicit issuer (iss) claim in MCP authorization responses to mitigate authorization mix-up attacks in multi-IdP environments. Motivation and C...

X Description: Proposes requiring the inclusion and validation of an explicit issuer (iss) claim in MCP authorization responses to mitigate authorization mix-up attacks in multi-IdP environments. Motivation and C...

Opengraph URL: https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:f22ede12-140b-fb66-389a-cf11e813e6a2
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idAC06:19F60:BF2CBA:10EEAFB:6A588A91
html-safe-nonce2ffe2d07fb29beb72f98659b01e2defc24f345fa1b2a0bebf9856ca8eff4f52e
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJBQzA2OjE5RjYwOkJGMkNCQToxMEVFQUZCOjZBNTg4QTkxIiwidmlzaXRvcl9pZCI6Ijc2OTQxOTY0NDgxMjEzNTg5OTMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac0c2719aa1c8ae4d03c96abf2f4f16b77bb3de1641a6b6c7294ba2736e35ec8e1
hovercard-subject-tagpull_request:3447954173
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/modelcontextprotocol/modelcontextprotocol/2468/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/9b87a141b3aaf5f55fcee9ca8dee72e696f310caea4b937f3677407b8a23d02a/modelcontextprotocol/modelcontextprotocol/pull/2468
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/9b87a141b3aaf5f55fcee9ca8dee72e696f310caea4b937f3677407b8a23d02a/modelcontextprotocol/modelcontextprotocol/pull/2468
og:image:altProposes requiring the inclusion and validation of an explicit issuer (iss) claim in MCP authorization responses to mitigate authorization mix-up attacks in multi-IdP environments. Motivation and C...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameEmLauber
hostnamegithub.com
expected-hostnamegithub.com
None5f2a0c7865178af3d91dd9f13b0cdfc3c73a2529c873d2780bb4c01271a57ec6
turbo-cache-controlno-cache
go-importgithub.com/modelcontextprotocol/modelcontextprotocol git https://github.com/modelcontextprotocol/modelcontextprotocol.git
octolytics-dimension-user_id182288589
octolytics-dimension-user_loginmodelcontextprotocol
octolytics-dimension-repository_id862570523
octolytics-dimension-repository_nwomodelcontextprotocol/modelcontextprotocol
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id862570523
octolytics-dimension-repository_network_root_nwomodelcontextprotocol/modelcontextprotocol
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release8aae7b8d6caacacf5c66eaeb2702d8dc88d85b4a
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/open-source/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/open-source/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/enterprise/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=modelcontextprotocol%2Fmodelcontextprotocol
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
Reloadhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
modelcontextprotocol https://github.com/modelcontextprotocol
modelcontextprotocolhttps://github.com/modelcontextprotocol/modelcontextprotocol
Notifications https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Fork 1.7k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Star 8.6k https://github.com/login?return_to=%2Fmodelcontextprotocol%2Fmodelcontextprotocol
Code https://github.com/modelcontextprotocol/modelcontextprotocol
Issues 113 https://github.com/modelcontextprotocol/modelcontextprotocol/issues
Pull requests 79 https://github.com/modelcontextprotocol/modelcontextprotocol/pulls
Discussions https://github.com/modelcontextprotocol/modelcontextprotocol/discussions
Actions https://github.com/modelcontextprotocol/modelcontextprotocol/actions
Projects https://github.com/modelcontextprotocol/modelcontextprotocol/projects
Models https://github.com/modelcontextprotocol/modelcontextprotocol/models
Security and quality 0 https://github.com/modelcontextprotocol/modelcontextprotocol/security
Insights https://github.com/modelcontextprotocol/modelcontextprotocol/pulse
Code https://github.com/modelcontextprotocol/modelcontextprotocol
Issues https://github.com/modelcontextprotocol/modelcontextprotocol/issues
Pull requests https://github.com/modelcontextprotocol/modelcontextprotocol/pulls
Discussions https://github.com/modelcontextprotocol/modelcontextprotocol/discussions
Actions https://github.com/modelcontextprotocol/modelcontextprotocol/actions
Projects https://github.com/modelcontextprotocol/modelcontextprotocol/projects
Models https://github.com/modelcontextprotocol/modelcontextprotocol/models
Security and quality https://github.com/modelcontextprotocol/modelcontextprotocol/security
Insights https://github.com/modelcontextprotocol/modelcontextprotocol/pulse
mcp-commander[bot]https://github.com/mcp-commander[bot]
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/modelcontextprotocol/tree/main
EmLauber:sep-issuer-claim-authhttps://github.com/EmLauber/modelcontextprotocol/tree/sep-issuer-claim-auth
Conversationhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
Commits24 (24)https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/commits
Checkshttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/checks
Files changedhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files
SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responseshttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#top
mcp-commander[bot]https://github.com/mcp-commander[bot]
modelcontextprotocol:mainhttps://github.com/modelcontextprotocol/modelcontextprotocol/tree/main
EmLauber:sep-issuer-claim-authhttps://github.com/EmLauber/modelcontextprotocol/tree/sep-issuer-claim-auth
https://github.com/EmLauber
EmLauberhttps://github.com/EmLauber
Mar 25, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#issue-4139093664
MCP Documentationhttps://modelcontextprotocol.io
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/EmLauber
Add SEP: Recommend Issuer (iss) Claim in MCP Auth Responseshttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/commits/025222f806d6bcc8d323ca7cf06e120bc691e819
025222fhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/commits/025222f806d6bcc8d323ca7cf06e120bc691e819
https://github.com/localden
localdenhttps://github.com/localden
Mar 25, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-23910997461
https://github.com/localden
localdenhttps://github.com/localden
auth https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth
security https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity
proposal https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aproposal
SEP https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3ASEP
Mar 25, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-23911001749
https://github.com/apps/github-project-automation
github-project-automationhttps://github.com/apps/github-project-automation
SEP Review Pipelinehttps://github.com/orgs/modelcontextprotocol/projects/12
Mar 25, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-23911004522
https://github.com/max-stytch
max-stytchhttps://github.com/max-stytch
Mar 25, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#pullrequestreview-4010475738
View reviewed changes https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819
seps/2468-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-6c0dbbd475fc7bd29d789f1cb30756b07591933f0e001733454e86bbbbff389f
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
seps/0000-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-99020d444237220d057bbb05b8d94adc091a90f404cb4216bdedb856662b12c4
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
seps/0000-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-99020d444237220d057bbb05b8d94adc091a90f404cb4216bdedb856662b12c4
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
seps/2468-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-6c0dbbd475fc7bd29d789f1cb30756b07591933f0e001733454e86bbbbff389f
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/max-stytch
max-stytchhttps://github.com/max-stytch
Mar 26, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4139552142
auth: issuer mix-up mitigation modelcontextprotocol/go-sdk#859 https://github.com/modelcontextprotocol/go-sdk/pull/859
https://github.com/0xbrainkid
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
https://github.com/aaronpk
aaronpkhttps://github.com/aaronpk
Mar 30, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#issuecomment-4155842584
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/0xbrainkid
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
https://github.com/agent-morrow
Sign in to viewhttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
https://github.com/SamMorrowDrums
SamMorrowDrumshttps://github.com/SamMorrowDrums
Apr 1, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#pullrequestreview-4044563814
View reviewed changes https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819
SamMorrowDrumshttps://github.com/SamMorrowDrums
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#pullrequestreview-4044563814
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
https://modelcontextprotocol.io/docs/tutorials/security/security_best_practiceshttps://modelcontextprotocol.io/docs/tutorials/security/security_best_practices
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
seps/0000-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-99020d444237220d057bbb05b8d94adc091a90f404cb4216bdedb856662b12c4
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
seps/0000-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-99020d444237220d057bbb05b8d94adc091a90f404cb4216bdedb856662b12c4
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/pcarleton
pcarletonhttps://github.com/pcarleton
Apr 3, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#pullrequestreview-4056452639
View reviewed changes https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819
seps/2468-recommend-issuer-claim-for-auth.mdhttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819#diff-6c0dbbd475fc7bd29d789f1cb30756b07591933f0e001733454e86bbbbff389f
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/localden
localdenhttps://github.com/localden
Apr 8, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24314151997
Make RFC 9207 issuer validation (OAuth mixup attack prevention) mandatory #1721 https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1721
https://github.com/localden
localdenhttps://github.com/localden
Apr 8, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-3324799652
The authorization spec is unclear when multiple Authorization servers are involved #1349 https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1349
max-stytchhttps://github.com/max-stytch
Apr 9, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-commit-df54a14
https://github.com/max-stytch
feat: add conformance tests for iss parameter (SEP-2468)https://github.com/max-stytch/conformance/commit/df54a143609475f4e95d4716bb67803c83f392b7
df54a14https://github.com/max-stytch/conformance/commit/df54a143609475f4e95d4716bb67803c83f392b7
modelcontextprotocol/modelcontextprotocol#2468https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/max-stytch
max-stytchhttps://github.com/max-stytch
Apr 9, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4228761971
feat: add conformance tests for iss parameter (SEP-2468) modelcontextprotocol/conformance#220 https://github.com/modelcontextprotocol/conformance/pull/220
https://github.com/pcarleton
pcarletonhttps://github.com/pcarleton
Apr 13, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24441953231
https://github.com/apps/sep-automation-bot
sep-automation-bothttps://github.com/apps/sep-automation-bot
proposal https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aproposal
Apr 13, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24441968472
https://github.com/apps/sep-automation-bot
sep-automation-bothttps://github.com/apps/sep-automation-bot
Apr 13, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#issuecomment-4235686666
@pcarletonhttps://github.com/pcarleton
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/apps/sep-automation-bot
sep-automation-bothttps://github.com/apps/sep-automation-bot
draft https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Adraft
Apr 13, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24441968849
https://github.com/pcarleton
pcarletonhttps://github.com/pcarleton
2026-06-30-RChttps://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4
Apr 13, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24453237830
https://github.com/dsp-ant
dsp-anthttps://github.com/dsp-ant
roadmap/security https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aroadmap%2Fsecurity
Apr 15, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24528481730
https://github.com/pcarleton
Fix SEP-2468 formatting and fill in metadata placeholdershttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/commits/20b84d2d7ceb37d3fc07521b7f231583215f3871
20b84d2https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/commits/20b84d2d7ceb37d3fc07521b7f231583215f3871
https://github.com/localden
localdenhttps://github.com/localden
in-review https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Ain-review
draft https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Adraft
Apr 22, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24764600722
https://github.com/localden
localdenhttps://github.com/localden
SEP Review Pipelinehttps://github.com/orgs/modelcontextprotocol/projects/12
Apr 22, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-24764604382
https://github.com/pcarleton
pcarletonhttps://github.com/pcarleton
Apr 24, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4323807424
feat(client/auth): RFC 9207 iss parameter validation (SEP-2468 reference impl) modelcontextprotocol/typescript-sdk#1957 https://github.com/modelcontextprotocol/typescript-sdk/pull/1957
https://github.com/chr-hertel
chr-hertelhttps://github.com/chr-hertel
May 26, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4477031794
[Client] Implement OAuth 2.0 Authorization Code flow with PKCE (RFC 6749 + RFC 7636) modelcontextprotocol/php-sdk#319 https://github.com/modelcontextprotocol/php-sdk/issues/319
guglielmo-sanhttps://github.com/guglielmo-san
May 27, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-commit-2d47cc9
https://github.com/max-stytch
auth: issuer mix-up mitigation (https://github.com/modelcontextprotocol/go-sdk/commit/2d47cc96646020b446391d0b039e1ea5ec06414f
#859https://github.com/modelcontextprotocol/go-sdk/pull/859
)https://github.com/modelcontextprotocol/go-sdk/commit/2d47cc96646020b446391d0b039e1ea5ec06414f
2d47cc9https://github.com/modelcontextprotocol/go-sdk/commit/2d47cc96646020b446391d0b039e1ea5ec06414f
modelcontextprotocol/modelcontextprotocol#2468https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://datatracker.ietf.org/doc/rfc9207/https://datatracker.ietf.org/doc/rfc9207/
#941https://github.com/modelcontextprotocol/go-sdk/issues/941
https://github.com/mikekistler
mikekistlerhttps://github.com/mikekistler
May 27, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4535752297
Implement RFC 9207 issuer validation in ClientOAuthProvider modelcontextprotocol/csharp-sdk#1605 https://github.com/modelcontextprotocol/csharp-sdk/pull/1605
https://github.com/joshrotenberg
joshrotenberghttps://github.com/joshrotenberg
May 27, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4535814895
feat(oauth): include iss parameter in auth responses per SEP-2468 joshrotenberg/tower-mcp#820 https://github.com/joshrotenberg/tower-mcp/issues/820
https://github.com/felixweinberger
felixweinbergerhttps://github.com/felixweinberger
May 29, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4547540798
Implement SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/typescript-sdk#2197 https://github.com/modelcontextprotocol/typescript-sdk/issues/2197
https://github.com/alexhancock
alexhancockhttps://github.com/alexhancock
Jun 2, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4573026794
Implement SEP-2468: Recommend Issuer (iss) Parameter in Auth Responses modelcontextprotocol/rust-sdk#876 https://github.com/modelcontextprotocol/rust-sdk/issues/876
https://github.com/localden
localdenhttps://github.com/localden
final https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal
accepted https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aaccepted
Jun 4, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-26317914709
https://github.com/localden
localdenhttps://github.com/localden
2026-07-28 Spec Implementationhttps://github.com/orgs/modelcontextprotocol/projects/41
Jun 6, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-26416912998
https://github.com/apps/github-project-automation
github-project-automationhttps://github.com/apps/github-project-automation
2026-07-28 Spec Implementationhttps://github.com/orgs/modelcontextprotocol/projects/41
Jun 6, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-26416912180
https://github.com/apps/github-project-automation
github-project-automationhttps://github.com/apps/github-project-automation
2026-07-28 Spec Implementationhttps://github.com/orgs/modelcontextprotocol/projects/41
Jun 6, 2026https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#event-26416912198
SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/java-sdk#1008 https://github.com/modelcontextprotocol/java-sdk/issues/1008
Implement SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/kotlin-sdk#812 https://github.com/modelcontextprotocol/kotlin-sdk/issues/812
Implement SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/python-sdk#2801 https://github.com/modelcontextprotocol/python-sdk/issues/2801
SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/ruby-sdk#386 https://github.com/modelcontextprotocol/ruby-sdk/issues/386
Implement SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses modelcontextprotocol/swift-sdk#242 https://github.com/modelcontextprotocol/swift-sdk/issues/242
(implementation): SEP-2468 - Recommend Issuer (iss) Parameter in MCP Auth Responses #2881 https://github.com/modelcontextprotocol/modelcontextprotocol/issues/2881
https://github.com/maxisbey
maxisbeyhttps://github.com/maxisbey
Jun 17, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4682676338
Auth — 2026 client-side requirements modelcontextprotocol/python-sdk#2902 https://github.com/modelcontextprotocol/python-sdk/issues/2902
https://github.com/felixweinberger
felixweinbergerhttps://github.com/felixweinberger
Jun 22, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4716471160
fix(auth): make 2025-03-26 backcompat mock RFC 8414 §3.3-compliant modelcontextprotocol/conformance#359 https://github.com/modelcontextprotocol/conformance/pull/359
https://github.com/sosh-ncampbell
sosh-ncampbellhttps://github.com/sosh-ncampbell
Jun 22, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4716988706
MCP-001: Migrate workspace to MCP 2026-07-28 RC spec greysquirr3l/stygian#95 https://github.com/greysquirr3l/stygian/issues/95
feat(client): SEP-2468 RFC 9207 iss + RFC 8414 §3.3 issuer-echo validation modelcontextprotocol/typescript-sdk#2344 https://github.com/modelcontextprotocol/typescript-sdk/pull/2344
feat(client,server-legacy): SEP-2468 server iss emission + finishAuth(URLSearchParams) overload modelcontextprotocol/typescript-sdk#2347 https://github.com/modelcontextprotocol/typescript-sdk/pull/2347
MCP Client: SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses spring-ai-community/mcp-security#81 https://github.com/spring-ai-community/mcp-security/issues/81
Authorization Server: SEP-2468: Recommend Issuer (iss) Parameter in MCP Auth Responses spring-ai-community/mcp-security#82 https://github.com/spring-ai-community/mcp-security/issues/82
https://github.com/felixweinberger
felixweinbergerhttps://github.com/felixweinberger
Jun 24, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4733701830
feat(client,server-legacy): SEP-2468 server iss emission + finishAuth(URLSearchParams) overload modelcontextprotocol/typescript-sdk#2357 https://github.com/modelcontextprotocol/typescript-sdk/pull/2357
https://github.com/BobDickinson
BobDickinsonhttps://github.com/BobDickinson
Jun 26, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4749783948
[MCP 2026-07-28] Authorization hardening modelcontextprotocol/inspector#1527 https://github.com/modelcontextprotocol/inspector/issues/1527
https://github.com/felixweinberger
felixweinbergerhttps://github.com/felixweinberger
Jun 26, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4650383987
Implement MCP 2026-07-28 modelcontextprotocol/typescript-sdk#2286 https://github.com/modelcontextprotocol/typescript-sdk/pull/2286
https://github.com/koic
koichttps://github.com/koic
Jun 28, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-pullrequest-4762104007
Validate the RFC 9207 iss Authorization Response Parameter per SEP-2468 modelcontextprotocol/ruby-sdk#431 https://github.com/modelcontextprotocol/ruby-sdk/pull/431
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Jun 29, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-issue-4767370155
[MCP: SEP Tracker] Week of 2026-06-29 jeffhandley/dotnet-vitals-servicing-release-manager#27 https://github.com/jeffhandley/dotnet-vitals-servicing-release-manager/issues/27
koichttps://github.com/koic
Jul 11, 2026 https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468#ref-commit-14b4f7c
https://github.com/koic
Validate the RFC 9207 iss Authorization Response Parameter per SEP-…https://github.com/modelcontextprotocol/ruby-sdk/commit/14b4f7c8c76783bb8f5550e3c25a7d6e153db67e
14b4f7chttps://github.com/modelcontextprotocol/ruby-sdk/commit/14b4f7c8c76783bb8f5550e3c25a7d6e153db67e
modelcontextprotocol/modelcontextprotocol#2468https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
#386https://github.com/modelcontextprotocol/ruby-sdk/issues/386
https://github.co/hiddenchars
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fmodelcontextprotocol%2Fmodelcontextprotocol%2Fpull%2F2468
https://github.com/pcarleton
pcarleton https://github.com/pcarleton
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/d9f7445d1d62e111df7d4049e40f3e8a46ebc2e7
https://github.com/apps/mcp-commander
mcp-commander[bot] https://github.com/apps/mcp-commander
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/1ab404a6bfce11537aded39e1af8a2a03910cbd5
https://github.com/localden
localden https://github.com/localden
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/d9f7445d1d62e111df7d4049e40f3e8a46ebc2e7
https://github.com/SamMorrowDrums
SamMorrowDrums https://github.com/SamMorrowDrums
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819
https://github.com/maxwellgerber
maxwellgerber https://github.com/maxwellgerber
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/07b1e70fe3bba2d5704bd894d36396af9633118c
https://github.com/KevinLuo2000
KevinLuo2000 https://github.com/KevinLuo2000
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/07b1e70fe3bba2d5704bd894d36396af9633118c
https://github.com/max-stytch
max-stytch https://github.com/max-stytch
https://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468/files/025222f806d6bcc8d323ca7cf06e120bc691e819
https://github.com/pcarleton
pcarleton https://github.com/pcarleton
auth https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aauth
final https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Afinal
roadmap/security https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Aroadmap%2Fsecurity
security https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3Asecurity
SEP https://github.com/modelcontextprotocol/modelcontextprotocol/issues?q=state%3Aopen%20label%3ASEP
2026-07-28 Spec Implementation https://github.com/orgs/modelcontextprotocol/projects/41
SEP Review Pipeline https://github.com/orgs/modelcontextprotocol/projects/12
2026-07-28-RC https://github.com/modelcontextprotocol/modelcontextprotocol/milestone/4
Make RFC 9207 issuer validation (OAuth mixup attack prevention) mandatory https://github.com/modelcontextprotocol/modelcontextprotocol/issues/1721
Please reload this pagehttps://github.com/modelcontextprotocol/modelcontextprotocol/pull/2468
https://github.com/EmLauber
https://github.com/0xbrainkid
https://github.com/aaronpk
https://github.com/agent-morrow
https://github.com/pja-ant
https://github.com/localden
https://github.com/pcarleton
https://github.com/SamMorrowDrums
https://github.com/maxwellgerber
https://github.com/KevinLuo2000
https://github.com/max-stytch
https://github.com/dsp-ant
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.