MCP's auth spec is lacking and Auth0 isn't helping

Y	Hacker News new \| ask \| show \| jobs

	MCP's auth spec is lacking and Auth0 isn't helping (github.com)
	3 points by Norcim133 304 days ago

2 comments

PaulHoule 304 days ago

MCP makes the old WS-stack from Microsoft look well designed.

link

Norcim133 304 days ago

Seems like it isn't all the protocol? A lot of it is the and the current tools. If you have a hardcore dev who knows auth they can implement to spec and be safe/simple-ish.

link

mindcrime 304 days ago

Actual title "The Auth Section Conflates Two Auth Flows".

link