DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.
OAuth State Parameter: Added CSRF protection to OAuth flows by implementing state parameter validation. The CLI now generates a secure random state value during OAuth authentication and validates it on callback to prevent cross-site request forgery attacks.