Articles tagged “oauth”
6 articles
9 in 10 MCP Servers Skip OAuth. The July 28 Spec Just Landed.
Only 8.5% of MCP servers use OAuth. The July 28 spec landed, and it doesn't make auth mandatory. Here's what it actually requires and what to fix first.
MCP's 2026 spec changes what your tools can do
The MCP spec RC is out with Extensions, Tasks, MCP Apps, and OAuth hardening. Here's what changes for CX agent builders before the July 28 final.
Static API keys don't work for autonomous agents
When you hand an autonomous agent a static API key, you're giving it a skeleton key with no expiry. Here's the per-call permission model that replaces it.
Your AI agents need their own identity
Most CX agents share a single API key with every other service on your stack. Here's how to implement proper agent identity: OAuth 2.0, scope minimization, JIT provisioning, and instant kill switches.
MCP Auth in Production: Scopes, Tokens, and Tenant Isolation
Most MCP servers ship with no auth. Here's how to add OAuth 2.0 scopes, per-tenant tool sets, and client isolation before your MCP server becomes load-bearing production infrastructure.
MCP Deep Dive: Advanced Patterns for Agent Tool Integration
Production MCP patterns for teams who've built their first server and need to scale it — OAuth 2.1 with PKCE, Streamable HTTP transport, gateways, sampling, dynamic tool registration, and multi-tenant security.
Learn Agentic AI
Weekly. Patterns for shipping agents that work. MCP, scorecards, regression tests, prompts, model comparisons.
