AGENTFORCE-MCP-01: Token Passthrough Exposure Configuration
🚨 Critical · Headless MCP Access
Detects MCP server configurations using static OAuth client IDs without PKCE enforcement, missing Device Authorization Grant patterns, or lacking Flex Gateway routing policies. Prevents token passthrough attacks where session credentials are exposed to external agents.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-01 |
| Severity | Critical |
| Category | Headless MCP Access |
Remediation
Enable PKCE (Proof Key for Code Exchange) on the OAuth flow, or migrate to Device Authorization Grant (RFC 8628) which does not require a stored client secret.