Hacker News new | ask | show | jobs
by pancomplex 18 days ago
This works for non-authenticated sites but wouldn't work for anything behind a login wall that requires a JWT or similar - right?
1 comments

are you asking if it will magically allow you to bypass authentication? only if the service is vulnerable to auth bypass and you don't mind breaking multiple laws.
Or solve by allowing mcp to drive already authed session (using a legit user)?