01:47
2026-09-03
secretspec.dev
ai-tools
Claude Code Stores OAuth Tokens in Plaintext
Anthropic's Claude Code 2.1.257 stores OAuth tokens for remote MCP servers in plaintext JSON on Linux, protected only by file permissions, contradicting its documentation that claims tokens are 'store…