AGENTFORCE-MCP-19: MCP OAuth Provider Skips redirect_uri or Client Checks
🔴 High · MCP Authentication
Detects OAuth authorization endpoints in MCP servers that redirect to the request's redirect_uri without comparing it to the client's registered URIs, accept unknown client_ids (creating them on the fly or by prefix), or combine open dynamic client registration with an authorize step that issues codes without user consent.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-MCP-19 |
| Severity | High |
| Category | MCP Authentication |
| Compliance | OWASP_MCP_TOP_10, SOC2_CC7 |
Remediation
Compare redirect_uri exactly with the URIs registered for the client and reject mismatches before redirecting; reject unknown client_ids; show a consent screen per client (and remember consent per client, not per user) before issuing a code; protect dynamic registration (initial access token or an allowlist of redirect hosts).