Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-08 · source-backed
PR #9379, merged August 6, fixes MCP tool entrypoints built as functools.partial(call_tool, tool_name=tool.name). Partial keyword defaults get overridden by call-time kwargs, so a model passing tool_name="delete_repo" as an argument to any MCP tool executed delete_repo while allow-lists, requires_confirmation, human-in-the-loop approval and logging all resolved against the declared function name. Your HITL gate was decorative. If you wrote a framework where approval and execution read different identifiers, go check it today.
Each link below shares sources, entities, or timing with this story.
Claude Code uses MCP / Shared entities / Same source domain / Shared topic
Linked by a graph relationship (Claude Code uses MCP); both cover August, MCP; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover August, MCP; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (Claude Code uses MCP); both cover August, MCP; overlapping topics (against, tool).
MCP uses OAuth / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (MCP uses OAuth); both cover MCP; reported by the same outlet (github.com).
Anthropic released MCP / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Anthropic released MCP); both cover MCP; reported by the same outlet (github.com).
OpenAI supports MCP / Shared entity: MCP / Same source domain / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (OpenAI supports MCP); both cover MCP; reported by the same outlet (github.com).
Claude Code uses MCP / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (Claude Code uses MCP); both cover August, MCP; reported by the same outlet (github.com).
Linked by a graph relationship (Claude Code uses MCP); both cover August, MCP; reported by the same outlet (github.com).