MCP fixed secret handling. URL elicitation moved the phishing risk into the browser MCP fixed secret handling. URL elicitation moved the phishing risk into the browser Sunil Gentyala October 6, 2026 MCP URL elicitation protects secrets but shifts phishing risk into trusted browser flows. Read More Read more about MCP fixed secret handling. URL elicitation moved the phishing risk into the browser