Record · corpus.blog/posts/01a087a1-ce92-713f-845a-f2611f0a7e2e

MCP Authorization When the User Isn't Clicking

mattgoodrich.com · published 28 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at mattgoodrich.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 27
Words captured: 2,573

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://modelcontextprotocol.io/specification/2025-11-25/basic/authorization

modelcontextprotocol.io

https://datatracker.ietf.org/doc/draft-ietf-oauth-v2-1/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc9728

rfc-editor.org

https://www.rfc-editor.org/rfc/rfc8707

rfc-editor.org

https://modelcontextprotocol.io/seps

modelcontextprotocol.io

Agents Need Capabilities, Not Roles Read at the source ↗

mattgoodrich.com

Agent Identities Are Service Accounts That Improvise Read at the source ↗

mattgoodrich.com

https://www.rfc-editor.org/rfc/rfc7591

rfc-editor.org

https://datatracker.ietf.org/doc/draft-ietf-oauth-identity-assertion-authz-grant/

datatracker.ietf.org

https://www.rfc-editor.org/rfc/rfc8693

rfc-editor.org

https://github.com/stacklok/toolhive/issues/5194

github.com

https://github.com/PrefectHQ/fastmcp/issues/1985

github.com

https://github.com/IBM/mcp-context-forge/issues/3385

github.com

https://cloudsecurityalliance.org/artifacts/state-of-nhi-and-ai-security-survey-report

cloudsecurityalliance.org

https://docs.nvidia.com/nemo/agent-toolkit/latest/components/auth/mcp-auth/mcp-service-account-auth.html

docs.nvidia.com

https://aembit.io/blog/mcp-oauth-2-1-pkce-and-the-future-of-ai-authorization/

aembit.io

https://www.scalekit.com/blog/oauth-2-1-mcp-secure-ai-integrations

scalekit.com

https://www.strata.io/resources/news/strata-identity-introduces-ai-identity-gateway-and-validation-sandbox/

strata.io

https://www.databricks.com/blog/ai-gateway-how-connect-agents-external-mcps-securely

databricks.com

https://github.com/cloudflare/workers-oauth-provider

github.com

https://github.com/agentgateway/agentgateway

github.com

https://goteleport.com/docs/machine-workload-identity/access-guides/mcp/

goteleport.com

https://blog.christianposta.com/authenticating-mcp-oauth-clients-with-spiffe/

blog.christianposta.com

Standard Token Exchange is now officially supported in Keycloak 26.2 Read at the source ↗

keycloak.org

https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-oauth.html

docs.aws.amazon.com

https://www.solo.io/blog/mcp-authorization-is-a-non-starter-for-enterprise

solo.io

https://datatracker.ietf.org/doc/html/draft-oauth-ai-agents-on-behalf-of-user-02

datatracker.ietf.org