Skip to content

Conversation

@abracchi-tw
Copy link
Contributor

πŸ€¦β€β™€οΈ

@abracchi-tw abracchi-tw requested a review from TownLake January 27, 2021 17:41
@abracchi-tw abracchi-tw merged commit 0b17588 into production Jan 27, 2021
@abracchi-tw abracchi-tw deleted the abracchi-tw-patch-2 branch January 27, 2021 18:32
agents-git-bot bot pushed a commit that referenced this pull request Dec 3, 2025
Synced from cloudflare/agents PR #696

- Add comprehensive "Secure MCP servers" guide covering OAuth security best practices
- Document two-phase state validation (check then consume) to prevent DoS attacks
- Explain 10-minute state expiration for security
- Describe unified callback URLs with state-based server identification
- Update OAuth MCP client guide with security considerations section
- Cross-reference security guide from OAuth client documentation

πŸ€– Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
agents-git-bot bot pushed a commit that referenced this pull request Dec 3, 2025
This update documents the security improvements and new capabilities
introduced in cloudflare/agents PR #696.

Changes:
- Add section on connecting to multiple MCP servers simultaneously
- Document unified callback URL architecture with state-based routing
- Explain enhanced OAuth state validation (format, expiration, one-time use)
- Document two-phase validation to prevent DoS attacks
- Add security best practices for OAuth callback handling
- Include code examples for multi-server connections

Related to cloudflare/agents#696

πŸ€– Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
agents-git-bot bot pushed a commit that referenced this pull request Dec 3, 2025
Add documentation for enhanced OAuth security measures that protect against replay attacks and DoS vulnerabilities:

- New changelog entry explaining the security improvements and breaking changes
- Added security note in OAuth guide describing automatic protections
- Documents state validation with nonce, TTL, and single-use tokens
- Notes callback URL unification across servers

Related to cloudflare/agents#696

πŸ€– Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
mattzcarey added a commit that referenced this pull request Dec 3, 2025
* Document MCP OAuth security hardening from agents PR #696

Add documentation for enhanced OAuth security measures that protect against replay attacks and DoS vulnerabilities:

- New changelog entry explaining the security improvements and breaking changes
- Added security note in OAuth guide describing automatic protections
- Documents state validation with nonce, TTL, and single-use tokens
- Notes callback URL unification across servers

Related to cloudflare/agents#696

πŸ€– Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* remove changelog

* lil cleanup of the mcp oauth docs

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Matt Carey <mcarey@cloudflare.com>
elithrar pushed a commit that referenced this pull request Dec 9, 2025
* Document MCP OAuth security hardening from agents PR #696

Add documentation for enhanced OAuth security measures that protect against replay attacks and DoS vulnerabilities:

- New changelog entry explaining the security improvements and breaking changes
- Added security note in OAuth guide describing automatic protections
- Documents state validation with nonce, TTL, and single-use tokens
- Notes callback URL unification across servers

Related to cloudflare/agents#696

πŸ€– Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* remove changelog

* lil cleanup of the mcp oauth docs

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Matt Carey <mcarey@cloudflare.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants