Posts tagged "identity"
MCP authorization: OAuth 2.1, audiences and why passthrough is forbidden
MCP authorization builds on OAuth 2.1, protected resource metadata and resource indicators. How the flow works and why token passthrough is forbidden.
Ops series: identity for agents, or who is acting on whose behalf
AI agent identity: each agent needs its own identity plus a record of whom it acts for. Delegation vs impersonation, audience-bound tokens, no shared API keys.