# NousResearch/hermes-agent · MCP OAuth crash from malformed cached redirect_uris

## Open now

- Nothing open on GitHub.

A bug was identified where malformed redirect_uris entries in the cached OAuth client.json caused the MCP OAuth login flow to crash on every attempt. Multiple fixes address skipping or handling these malformed entries to prevent the crash.

## TL;DR

- 4 member(s): 0 open issue(s), 1 closed issue(s), 0 open PR(s), 2 merged PR(s), 1 PR(s) closed without merging.
- A fix was merged to main in PR #113786. Verify it addresses your case.
- **Recommended:** read PR #113786 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `resolved` · deciding PR(s): `pr-113786`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.50`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #112568: \[Bug\]: MCP OAuth: malformed cached redirect_uris entry crashes the OAuth flow every attempt

## Prior & competing PRs

- **#113068: fix(mcp): malformed cached OAuth redirect_uris no longer crash the login flow (#112568, salvage #112569)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `tests/tools/test_mcp_oauth.py`, `tools/mcp_oauth.py`
- **#113786: fix(mcp): poisoned client.json is covered end-to-end on the OAuth login path (closes remaining atoms of #112568)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `tests/tools/test_mcp_oauth.py`
- **#112569: fix(mcp): skip malformed cached OAuth redirect_uris instead of crashing**. closed without merge
  - maintainer direction: category `merged_via`; implication `superseded`; refs `f8f89b20d27`, `e166791f9ffbb825a75aa41f6c447e5cb14fc6d0`, `#113068`

## Fix status

- Merged to main in PR #113786 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-09-17`.