MCP OAuth: let users trust their own redirect URIs safely — Blankdot