OAuth
4 posts tagged #oauth
4 posts on OAuth, spread across AI Agents (1), Dev Tools & AI Workflow (1) — most read: “MCP OAuth Security: Tool Impersonation, aud Mismatch, Token Replay [2026]” and “MCP Server Security Best Practices: Checklist + CI Linter [2026]”.
Cybersecurity MCP OAuth Security: Tool Impersonation, aud Mismatch, Token Replay [2026]
A threat model for MCP tool servers using OAuth: how tool impersonation and audience mismatch happen, how tokens get replayed, and what to validate and log in 2026.
Cybersecurity MCP Server Security Best Practices: Checklist + CI Linter [2026]
A practical MCP server security test plan: authn/authz models, tool allowlists, prompt-injection regression tests, rate limits, audit logs, and a CI-friendly permissions linter.
AI and Machine Learning How to Set Google Workspace AI Agent Permissions + Audit Trail [2026]
A practical, least-privilege model for Drive/Gmail agents: scopes, per-user vs domain-wide delegation, app access control defaults, and an incident-ready audit trail.
Developer Tools How to Secure MCP Servers: Auth + AuthZ [2026 Tutorial]
A gateway-grade blueprint for MCP servers: authenticated discovery, PKCE/OAuth done right, tool-scoped permissions, audit logs, rate limits, and secret handling—with runnable Node/Express code.
Keep exploring
Close to this topic, not on this page.
