Pergi ke luar talian dengan aplikasi Player FM !
Making OAuth Scale Securely for MCPs - Aaron Parecki - ASW #360
Fetch error
Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on December 10, 2025 10:17 ()
What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.
Manage episode 523386936 series 70666
The MCP standard gave rise to dreams of interconnected agents and nightmares of what those interconnected agents would do with unfettered access to APIs, data, and local systems. Aaron Parecki explains how OAuth's new Client ID Metadata Documents spec provides more security for MCPs and the reasons why the behavior and design of MCPs required a new spec like this.
Segment resources:
- https://aaronparecki.com/2025/11/25/1/mcp-authorization-spec-update
- https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-00.html
- https://oauth.net/cross-app-access/
- https://oauth.net/2/oauth-best-practice/
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-360
2226 episod
Fetch error
Hmmm there seems to be a problem fetching this series right now. Last successful fetch was on December 10, 2025 10:17 ()
What now? This series will be checked again in the next day. If you believe it should be working, please verify the publisher's feed link below is valid and includes actual episode links. You can contact support to request the feed be immediately fetched.
Manage episode 523386936 series 70666
The MCP standard gave rise to dreams of interconnected agents and nightmares of what those interconnected agents would do with unfettered access to APIs, data, and local systems. Aaron Parecki explains how OAuth's new Client ID Metadata Documents spec provides more security for MCPs and the reasons why the behavior and design of MCPs required a new spec like this.
Segment resources:
- https://aaronparecki.com/2025/11/25/1/mcp-authorization-spec-update
- https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-00.html
- https://oauth.net/cross-app-access/
- https://oauth.net/2/oauth-best-practice/
Visit https://www.securityweekly.com/asw for all the latest episodes!
Show Notes: https://securityweekly.com/asw-360
2226 episod
ทุกตอน
×Selamat datang ke Player FM
Player FM mengimbas laman-laman web bagi podcast berkualiti tinggi untuk anda nikmati sekarang. Ia merupakan aplikasi podcast terbaik dan berfungsi untuk Android, iPhone, dan web. Daftar untuk melaraskan langganan merentasi peranti.