<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Stream Vessel blog</title>
    <link>https://streamvessel.com/blog</link>
    <atom:link href="https://streamvessel.com/blog/rss.xml" rel="self" type="application/rss+xml" />
    <description>Engineering notes on secure access to S3 storage, for people and AI agents.</description>
    <language>en</language>
    <item>
      <title>Letting users trust their own MCP clients, without opening a phishing hole</title>
      <link>https://streamvessel.com/blog/mcp-trusted-redirect-uris</link>
      <guid isPermaLink="true">https://streamvessel.com/blog/mcp-trusted-redirect-uris</guid>
      <pubDate>Wed, 04 Nov 2026 00:00:00 GMT</pubDate>
      <description>Why MCP servers either refuse custom clients or open a phishing hole, and how per-user trusted redirect URIs, decided at sign-in, give you both.</description>
    </item>
  </channel>
</rss>
