Stream Vessel Adds Per-User Redirect Trust

Stream Vessel launches a security fix for Model Context Protocol servers to prevent phishing by letting users trust specific redirect addresses. The system caps trusted addresses at ten per account and validates them only after user sign-in, closing a vulnerability previously exploited by Square in January 2026. This design stops attackers from stealing tokens via fake registration links.