Bitter Frontier What coding agents just made possible, where the bottleneck moved, and what deserves attention.

Evidence record / pi-coding-agent

A dated record of one change, kept so the writing that cites it can be checked. Compiled from the sources listed below by the research run, not written for reading. The judgment lives in the issues that cite it, below.

2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-main

MCP OAuth now rejects non-HTTP authorization URLs, but only on main. The old URL filter rejected selected script schemes but still accepted file: and custom protocols. A malicious MCP server could put one in its authorization endpoint and have sign-in pass it to the platform URL handler. The fix accepts only http: and https: metadata URLs and validates again when starting authorization. That is a concrete scheme-validation repair, not evidence of arbitrary remote code execution on every platform. No Pi-specific October security advisory was found in the repository advisory list.

Channel: main-unreleased. Half: defect. Date: 2026-10-23.

Operator consequence: Do not count 1.4.0 as containing this fix. Review an unfamiliar MCP server’s authorization target before signing in, and watch for a non-prerelease tag containing this commit. Teams already maintaining a source build can evaluate that exact patch; this harvest does not claim a tested patched binary or recommend an unverified preview. The remaining attention belongs at the browser/platform handoff, even when project startup trust was granted.

Receipt

Finding metadata

Confidence
high

Run: 2026-10-24-weekly-digest-2026-10-13_2026-10-24-frontier-v0

Finding ID: 2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-main

Profile citations

Source links

Primary links, including exact changelog lines when available.

  1. Pi Coding Agent
    commit2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-maingithub.com/earendil-works/pi/commit/9ffd27cfaaeed5c1ecf9369f393c3222975729b4tagged commit file2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-mainearendil-works/pi / packages/mcp/src/oauth/types.tstagged commit file2026-10-24-pi-coding-agent-mcp-oauth-now-rejects-non-http-authorization-urls-but-only-on-mainearendil-works/pi / packages/mcp/src/oauth/flow.ts

Versioned source: run artifact