A legitimate MCP client running on your machine. It connects to the
gateway at https://mcp-gateway.lab.quokkahost.com and receives its
authorization code on its own loopback callback,
https://mcp-client.lab.quokkahost.com/callback.
Do this first. Connecting once establishes your consent to the gateway at Kanidm -- which is exactly what makes the later attack silent.
Connect this MCP client to the gateway