anthropics / anthropics/claude-code

[Bug] MCP OAuth: revokeReplacedServerTokens revokes freshly issued tokens immediately after /mcp login

Open
#94,471 0 comments 0 reactions 0 assignees View on GitHub
area:auth area:mcp bug needs-repro platform:macos
Dominant language
Python
Stars
145k
Forks
23.1k
PR merge metrics
PR metrics pending

Description

**Bug Description**
MCP OAuth: revokeReplacedServerTokens revokes freshly issued tokens right after /mcp login

**Environment Info**
- Platform: darwin
- Terminal: tmux
- Version: 2.1.269
- Feedback ID: b0e246f3-700d-44b5-80cb-40f4d71f4943

**Errors**
```json
[]
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by tracing the MCP OAuth /mcp login flow and the revokeReplacedServerTokens behavior described in the report. Reproduce the issue on darwin with version 2.1.269, then verify that freshly issued tokens remain valid after login; the payload names no files or tests.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Active
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.