Articles tagged “oauth”
5 articles
71% of organizations aren't prepared to secure their AI agents' tools
MCP gives AI agents autonomous access to real systems — and introduces attack vectors that traditional security can't see. A technical breakdown of tool poisoning, rug pulls, cross-server shadowing, and the defense framework production teams need now.
MCP's 2026 spec changes what your tools can do
The MCP spec RC is out with Extensions, Tasks, MCP Apps, and OAuth hardening. Here's what changes for AI agent builders before the July 28 final.
9 in 10 MCP Servers Skip OAuth. The July 28 Spec Just Landed.
Only 8.5% of MCP servers use OAuth. The July 28 spec landed, and it doesn't make auth mandatory. Here's what it actually requires and what to fix first.
MCP Auth in Production: Scopes, Tokens, and Tenant Isolation
Most MCP servers ship with no auth. Here's how to add OAuth 2.0 scopes, per-tenant tool sets, and client isolation before your MCP server becomes load-bearing production infrastructure.
MCP Deep Dive: Advanced Patterns for Agent Tool Integration
Production MCP patterns for teams who've built their first server and need to scale it — OAuth 2.1 with PKCE, Streamable HTTP transport, gateways, sampling, dynamic tool registration, and multi-tenant security.
MCP changelog and dev notes
Short, occasional updates on the MCP spec, new Protobox features, and patterns we've seen in production. No marketing fluff.
