Tags
“Secrets such as refresh tokens” could reach another host when an MCP server redirected Claude Code’s OAuth requests, and version 2.1.321 is the release that fixes it. Have you ever checked where your MCP servers send your OAuth tokens?
Per Bloomberg, Goldman Sachs now limits Claude Code to its 12,000-plus engineers, cutting off most bankers and traders. The same bank is a lead underwriter on Anthropic’s IPO. At your company, can anyone run coding agents, or only engineers?
Claude Codeanalysis
“Yes, and don’t ask again” in Claude Code can save a typed password word-for-word in a project settings file. Apiiro found 1,122 public GitHub copies holding such secrets. When Claude Code asks, do you pick “don’t ask again” or approve each time?
