Tag: identity
All the articles with the tag "identity".
-
The Identity Map I Wish I Had
I built a map of identity engineering, for engineers who lose track of what to read next and for developers who want a way into the field. If you do not write code, hand the address to your agent and let it read on your behalf.
-
XAA and EMA: Field Notes and Insights
Updated:Field notes from running Cross-App Access end to end: everything you need is optional, and there is no playbook yet.
-
DPoP, HTTP Signatures, and mTLS, and Why a Key Pair Is So Cool
Tying a token to a private key the client holds is a good idea, and not only for MCP. There are three places to do it, and each one stops something different.
-
Agents Need Their Own Accounts
Why AI agents fit neither human accounts nor service accounts: they execute work long after authorization was granted, alternating between delegated and independent authority. Makes the case for first-class agent identities that keep principal, actor, and delegation chain explicit.
-
Six Small Fixes That Make MCP Authorization Less Weird
An identity practitioner's read of the six authorization SEPs in the MCP 2026-07-28 release candidate. Small, unglamorous fixes are exactly what mature protocol work looks like: by converging on proven OAuth and OIDC patterns, this release brings MCP authorization a big step closer to stability and enterprise readiness.