tengu_mcp_oauth_issuer_echo_mismatch
A Claude Code feature flag, read out of the shipped bundle. No mined inventory carries it: everything below comes from what this site has written about it.
MCP OAuth now checks a server's echoed issuer, but only records mismatches rather than blocking.
Not Anthropic's. This is the line from the earliest changelog entry here that named it, v2.1.224.
In the changelogs
2Releases whose published page names tengu_mcp_oauth_issuer_echo_mismatch.
-
v2.1.224
MCP OAuth checks the issuer a server echoes back, telemetry only for now
MCP OAuth now checks a server's echoed issuer, but only records mismatches rather than blocking.
gate cited by this entry, found in this entry's text
-
v2.1.224
MCP servers checked for the issuer they echo back
Claude checks whether an MCP server points authentication elsewhere, logging mismatches without blocking.
gate cited by this entry, found in this entry's text
Gate readings
0No release here has a gate table behind it for this flag. Most published releases have none at all: the readings exist only for versions the pipeline captured flag state on.
First cited
1The earliest release whose published evidence quoted tengu_mcp_oauth_issuer_echo_mismatch was v2.1.224, 7 Aug 2026. That is the oldest release this project wrote about it, so it is a floor on the name's age and not the release that introduced it. It is not a presence reading: which builds carried the name is the table below.
Presence across releases
0The miner has never read a build containing this name. It is here because a changelog entry of ours names it, which is evidence that it existed and not evidence of which releases carried it. The inventory starts at v2.1.138 and everything older than that was never mined.
Read out of the published npm bundle release by release, and out of Anthropic's own documentation as this site captured it. Nothing on this page is a description anybody here wrote about what the feature flag does. All feature flags.