{"repo":"NousResearch/hermes-agent","public_id":"112060","display_label":"MCP OAuth device flow issuer selection fix","summary":"These items address a bug where the MCP OAuth device-code flow incorrectly selects an authorization server, specifically failing to match the issuer-bound server rather than defaulting to the first advertised one. The work involves fixing server selection logic to try valid device authorization servers.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":112195,"merged_at":"2026-09-16T02:00:43+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-09-16T02:00:43+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":1.0},"fix_edges":[{"issue_number":112060,"pr_number":112195,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-09-16T02:00:43+00:00"}],"members":[{"kind":"issue","number":112060,"title":"[Bug]: Higgsfield MCP OAuth issuer mismatch; device-code flow cannot be selected","url":null,"state":"closed"},{"kind":"pr","number":112068,"title":"fix(mcp): try valid device authorization servers","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"551fe883d9","number":0},{"kind":"pr","value":"#112195","number":112195}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":112195,"title":"fix(mcp): OAuth device login picks the issuer-bound authorization server instead of the first advertised one (#112060, #82416, salvage #112068)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["evals/mcp_device_flow.py","tests/tools/test_mcp_device_flow.py","tools/mcp_oauth_device.py","website/docs/reference/mcp-config-reference.md"]}],"trust":{"default_tier":"verified","includes_suggested":false}}