What
The MCP OAuth callback port flag (--callback-port) now validates that the port number falls within the valid TCP range [1, 65535], rather than only checking it is a positive integer.
Details
- The error message now reads: "Error: --callback-port must be an integer in [1, 65535]"
- Port 0 is no longer accepted. The validation expression is
!Number.isInteger(m) || m <= 0 || m > 65535, so port 0, negative values, and non-integer inputs (e.g.1.5or non-numeric strings that parse toNaN) are all rejected. - The same validation is applied in two separate command paths:
claude mcp add(for SSE and HTTP transports) andclaude mcp oauth identity-provider set.
Evidence
Updated validation error string (search for "--callback-port must be an integer in [1, 65535]")
Strings lifted out of the shipped bundle, so the claim above can be checked against them.