Since this Software Statement is essentially a Bearer Token it would allow any running process on localhost to present itself as a legitimate client. It is a common risk in all these flows when dealing with localhost. #64
Description
Since this Software Statement is essentially a Bearer Token it would allow any running process on localhost to present itself as a legitimate client. It is a common risk in all these flows when dealing with localhost.
Originally posted by @JohnBergant in modelcontextprotocol/modelcontextprotocol#1032 (comment)