Authorization

Search documents
Agents, Access, and the Future of Machine Identity — Nick Nisi (WorkOS) + Lizzie Siegle (Cloudflare)
AI Engineer· 2025-06-30 22:52
[Music] Hi, I'm Lizzie. I'm a developer advocate at Cloudflare. And I'm Nick. I'm a developer experience engineer at work OS. Yes. So, at Cloudflare, I make a lot of AI demos, AI MCP servers. Anyone here also making any of those? Yes. Agents. Nice. Of course, should have guessed because conference. So, I've been having fun making agents and MCP servers that act on behalf of me. I built an agent to auto vote in the NBA finals for me and then I got blocked eventually. Uh, anyways, like book tennis courts in S ...
What does Enterprise Ready MCP mean? — Tobin South, WorkOS
AI Engineer· 2025-06-27 09:31
MCP and AI Agent Development - MCP is presented as a way of interfacing between AI and external resources, enabling functionalities like database access and complex computations [3] - The industry is currently focused on building internal demos and connecting them to APIs, but needs to move towards robust authentication and authorization [9][10] - The industry needs to adapt existing tooling for MCP due to its dynamic client registration, which can flood developer dashboards [12] Enterprise Readiness and Security - Scaling MCP servers requires addressing free credit abuse, bot blocking, and robust access controls [12] - Selling MCP solutions to enterprises necessitates SSO, lifecycle management, provisioning, fine-grained access controls, audit logs, and data loss prevention [12] - Regulations like GDPR impose specific logging requirements for AI workloads, which are not widely supported [12] Challenges and Future Development - Passing scope and access control between different AI workloads remains a significant challenge [13] - The MCP spec is actively developing, with features like elicitation (AI asking humans for input) still unstable [13] - Cloud vendors are solving cloud hosting, but authorization and access control are the hardest parts of enterprise deployment [13]