Alexander Loginov·1d agoLetting users trust their own MCP clients, without opening a phishing holeThe problem
InMicrosoftbyOzgur Guler·2d agoAgent Governance on Microsoft Foundry, Part III: Borrowed identityOAuth identity passthrough with the GitHub MCP connector — when Entra is not in the loop, who does the server think is calling?A response icon1A response icon1
Prasadam·2d agoHow “Login with Google” Really Works: OAuth 2.0 and OpenID Connect, Explained with a Real AppA step-by-step walkthrough using a made-up app called Grow, from the point of view of the tech lead who has to build it.
Mustafa Öztürk·3d agoMCP Server Güvenliği: Token Audience Nasıl Test Edilir?İmza, iss ve exp doğru olsa bile başka servisin token’ı kapınızdan girebilir. mcp-audprobe ile bunu CI’da yakalayın.
InLevel Up CodingbyJingJing (Chris) Bao·3d agoLightweight Fine-Grained Authorization for AI Agents — OAuth Rich Authorization RequestsBackground
InDatabricks Platform SMEbySuraj Karuvel·4d agoOne Sign-In, Many Services: Okta Token Exchange for External Apps and Agents Calling DatabricksPart 2 of 2: the same pattern with RFC 8693, for apps and AI agents running outside Databricks that call Databricks and an MCP server as…
InDatabricks Platform SMEbySuraj Karuvel·4d agoOne Sign-In, Many Services: On-Behalf-Of for External Apps and Agents Calling DatabricksPart 1 of 2: a step-by-step Entra ID guide for apps and AI agents running outside Databricks that call Databricks and an MCP server as the…
Roni Das·5d agoFollow One OAuth Token From Birth to Expiry, and Most Interview Questions Answer ThemselvesPKCE, the state parameter, the aud check, refresh token rotation and the 40 minutes after an account is disabled: OAuth 2.0 interview…
InJavaScript in Plain EnglishbyNishkarsh Gupta·5d agoAI Agent Authentication: Why API Keys Aren’t EnoughScoped, short-lived tokens beat static keys. Here is the standard route.
Ahmad Afzal·6d agoYour agent exchanged a token. Did it just inherit the building?Why a new credential is not evidence that a delegation policy has been designed.
