Contributed to the open-webui/open-webui repository by developing a security-focused enhancement for Dynamic Client Registration, emphasizing least-privilege access through resource-specific Protected Resource Metadata scopes. The implementation updated the DCR flow to prioritize PRM scopes and introduced a fallback mechanism to Authorization Server scopes when PRM data was unavailable, thereby strengthening security and compliance. This work aligned scope handling with the MCP Scope Selection Strategy and RFC 9728, reducing the risk of scope leakage across resources. The project involved backend development and API integration using Python, and also included collaborative improvements to code quality and the review process within the team.