# NousResearch/hermes-agent · MCP OAuth browser callback not captured correctly

## Open now

- Nothing open on GitHub.

A bug where the MCP login flow fails to register the OAuth callback despite the browser reaching the correct loopback port, apparently because subsequent browser requests (e.g. favicon.ico) overwrite or interfere with the first callback result. The members include the bug report and two related fix attempts.

## TL;DR

- 3 member(s): 0 open issue(s), 1 closed issue(s), 0 open PR(s), 1 merged PR(s), 1 PR(s) closed without merging.
- A fix was merged to main in PR #116658. Verify it addresses your case.
- **Recommended:** read PR #116658 (and any competing PRs below) before filing. Confirm the merged change covers your symptom.

## Maintainer resolution verdict

- Internal-tracker verdict over this cluster's issue members: `resolved` · deciding PR(s): `pr-116658`. This is distinct from the fix status above. Weigh it yourself.

## How this cluster was grouped

- Link evidence (`STRUCTURAL_SPANNING`): every member is connected by structural evidence: shared changed files, or a closing/superseded reference.
- Pairwise link density `0.67`: the share of member pairs that carry a link, counting a structural link in full and a relevance-only link at 0.36. `1.00` means every pair is linked.

## Closed / duplicate issues

- #116278: mcp login: browser callback reaches the correct loopback port but the waiting flow never registers it (code+state+iss verified in browser history; curl to the same socket works)

## Prior & competing PRs

- **#116658: fix(mcp): browser OAuth callback is registered even when the browser also fetches favicon.ico (#116278, salvage #116314)**. merged to main · fix tier `verified`
  - maintainer direction: category `merged`
  - files: `tests/tools/test_mcp_oauth_callback_latch.py`, `tools/mcp_oauth.py`
- **#116314: fix(mcp): keep the first callback result from being clobbered by browser fetches**. closed without merge
  - maintainer direction: category `merged_via`; implication `superseded`; refs `74ddb737ca5c`, `#116658`, `#116278`, `#116314`

## Fix status

- Merged to main in PR #116658 (cited above). No release data is tracked. Verify downstream.
- Fix last verified (merged) `2026-09-20`.