Python SDK could allow a malicious MCP server to steal OAuth authentication material and take over AI agent accounts. The ...