{"version":"2.1.269","anchor":"mcp-oauth-manual-redirect-paste-now-validates-the-url-before","canonical_anchor":"mcp-oauth-manual-redirect-paste-now-validates-the-url-before","heading":"MCP OAuth manual-redirect paste now validates the URL before accepting it","tier":"notice","area":"MCP OAuth","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269\/e\/mcp-oauth-manual-redirect-paste-now-validates-the-url-before","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.269","markdown":"### MCP OAuth manual-redirect paste now validates the URL before accepting it\n\nPasting a redirect URL during MCP server sign-in is now checked against the expected value before it's accepted\n\n**What**\n\nSome browsers show a connection error during sign-in to an MCP server (a connector that gives Claude Code access to an external tool or service), so Claude Code lets you manually paste the redirect URL instead. Now, whatever you paste is checked against the URL that sign-in actually expects. If it doesn't match, you get an inline error saying \"That isn't this sign-in's redirect URL\" instead of the app silently accepting it.\n\n**Why**\n\nPreviously any pasted text was accepted, which could let a wrong or mistyped URL through and break the sign-in silently. Validating the paste catches mistakes immediately.\n\n- Area: MCP OAuth\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 2\/5"}