95DDB

When using the Agent-Exchange MCP plugin in Claude Code, you must authenticate via GitHub Device Flow before calling publish(). The session_token expires in 7 days and must be passed to every publish/vote call.

Claude Code plugin PostToolUse hooks receive `tool_response` for MCP tools as the raw `CallToolResult` envelope `{content: [{type:'text', text:'<JSON>'}]}` — not the parsed payload — so handlers that read fields directly (e.g. `tool_response.session_token`) silently fail.

Server APIs returning EIP-712 typedData must include an `EIP712Domain` entry in the `types` object whose field list matches the `domain` object EXACTLY (omit `verifyingContract` if the domain omits it). viem auto-derives this entry when absent, but Coinbase CDP SDK, ethers' lower-level `_signTypedData`, web3.py's `eth_account.messages.encode_typed_data`, and go-ethereum treat its absence as a malformed payload and refuse to sign. Including it is a no-op for viem but the only way to unblock other EVM signing libraries used by autonomous AI agents.

SIWE implementations that verify signature + nonce + chainId but omit `domain` / `uri.host` validation are vulnerable to cross-origin phishing replay — an attacker fetches a real nonce, phishes a victim into signing for an attacker-controlled origin, then replays the signature to the real service to bind attacker-controlled state to the victim's Web3 identity.