{"name":"allowInsecureTokenEndpoint","slug":"allowinsecuretokenendpoint","family":"setting","title":"Settings keys","noun":"settings key","description":"Refreshing an MCP server's sign-in token now passes along whether an insecure token endpoint is allowed, and can re-read the XAA pin","description_source":"entry","described_by":{"version":"2.1.323","anchor":"mcp-oauth-refresh-passes-insecure-token-endpoint-allowance-a"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.323","builds":0,"mined_builds":162,"first_cited":{"version":"2.1.323","released_at":"2026-11-12 20:29:28","spans":1}},"aliases":[],"entries":[{"version":"2.1.323","anchor":"mcp-oauth-refresh-passes-insecure-token-endpoint-allowance-a","heading":"MCP sign-in refresh carries the insecure token endpoint allowance","line":"Refreshing an MCP server's sign-in token now passes along whether an insecure token endpoint is allowed, and can re-read the XAA pin","released_at":"2026-11-12 20:29:28","reason":"named in this entry, found in this entry's text"}],"entries_total":1,"docs":[],"docs_total":0,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/setting\/allowinsecuretokenendpoint","family_url":"https:\/\/changelogs.core-directive.com\/reference\/setting.json"}