Articles tagged “authorization”
4 articles
9 in 10 MCP Servers Skip OAuth. The July 28 Spec Just Landed.
Only 8.5% of MCP servers use OAuth. The July 28 spec landed, and it doesn't make auth mandatory. Here's what it actually requires and what to fix first.
Static API keys don't work for autonomous agents
When you hand an autonomous agent a static API key, you're giving it a skeleton key with no expiry. Here's the per-call permission model that replaces it.
Your AI agents need their own identity
Most CX agents share a single API key with every other service on your stack. Here's how to implement proper agent identity: OAuth 2.0, scope minimization, JIT provisioning, and instant kill switches.
When your agents call other agents, don't assume trust
Multi-agent systems create delegation chains where each agent trusts the one that called it. That assumption is how prompt injection and privilege escalation get in. Here's how to enforce scoped trust instead.
Learn Agentic AI
Weekly. Patterns for shipping agents that work. MCP, scorecards, regression tests, prompts, model comparisons.
