mcp

I'm in Your Apps

Leveraging a stolen Codex access token to invoke the MCP tools behind a user's connected Apps - sending mail, writing to repos, and reading documents on their behalf.