Tanish Manku 5db9971831 mcp: record why the webapp /connect hand-off waits on a backend hand-off code ...

The webapp can only pass its own browser session (localStorage copy or the
"do not use" /v1/session_token), which would make per-grant disconnect and the
90-day cap cosmetic upstream. Keep the consent page; ask the backend for a
single-use hand-off code + redeem pair instead.

Claude-Session: https://claude.ai/code/session_01H3gfN2NCx3hBXSrZXYHUQ3

2026-08-25 00:20:37 -07:00

..

backend-handoff.md

mcp: record why the webapp /connect hand-off waits on a backend hand-off code

2026-08-25 00:20:37 -07:00

infra-request.md

mcp: project context, constraints, and one-time infra request

2026-08-24 19:49:59 -07:00