Anthropic Called Its Own Protocol's Critical Flaw 'Expected Behavior'

OX Security's disclosure follows a research process that began in November 2025 and ran through more than 30 responsible disclosure procedures before going public ^[1]. The standard for responsible disclosure exists precisely to give vendors time to act before exposure becomes universal. Anthropic's repeated response — that the MCP protocol behaves as designed — does not close that process. It eliminates it. There is no patch to wait for, no timeline to track, and no remediation path for the developers who have already deployed on the protocol.