个人 MCP 服务器的 OAuth 2.1 认证生产实践与限流绕过

来源证据

该项目开源 MCP 服务器在生产运行约 3 个月后，收到研究员报告的速率限制器绕过，成为项目首个安全公告。

This is the second post about Vault Cortex, an open-source MCP server that gives Claude read and write access to my Obsidian vault from any device. The first post covered what it's for and how it held up over 15 days of travel. This one covers the auth architecture and what three months of production traffic changed, including a rate-limiter bypass a researcher reported that became the project's first advisory. Repo: https://github.com/aliasunder/vault-cortex Happy to answer questions.