Source Intelligence

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

All of v2.1.224 Home All releases olderv2.1.223 v2.1.225newer

MCP servers checked for the issuer they echo back

You'll notice
Useful3 Signal3
MCP

Claude checks whether an MCP server points authentication elsewhere, logging mismatches without blocking.

Feature flag
tengu_mcp_issuer_strict_echo Not enough to say

Nothing here resolved what this flag was doing on this version, so nothing here should be read as on or off.

This account: no value returned · anonymous baseline: no value returned · compiled default in v2.1.224: on

These values were read against a different version of Claude Code, so treat them as the nearest reading available instead of one taken on this release.

Read once, for one account on one subscription tier, against v2.1.224. It isn't a statement about your account. What a flag value here can and cannot tell you

What

When connecting to an MCP server over OAuth, Claude now compares the authorization-server address it asked about against the issuer value the server returns in its discovery metadata, catching a server that points authentication somewhere else. In this build the check only records telemetry: the gate tengu_mcp_issuer_strict_echo decides the mode and its in-source fallback is false, so absent a remote value the result is observe-only.

Details
  • In observe mode a mismatch is logged with outcome proceeded and the connection continues.
  • In enforce mode the connection raises an issuer echo cross-origin error and authentication fails with reason issuer_echo_denied.
  • Mismatches are classified before reporting, including same_origin and unparseable plus a reason per differing part of the URL.
  • None of this exists in 2.1.223; the whole check is new.
Evidence

tengu_mcp_oauth_issuer_echo_mismatch

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.224 →