ai-agents
Articles tagged with ai-agents.
MCP Filesystem Capability Laundering: When a Harmless Tool Can Read Your SSH Keys
MCP server security: a 2026 study flagged 787 of 4,806 servers for hidden file access. Covers Filesystem MCP Server path…
12 min readWhat Is an MCP Gateway, and What Does It Not Do for OAuth?
An MCP gateway proxies agent traffic to MCP servers and applies policy, but it does not replace token validation at…
7 min readKeycloak 26.8 Token Exchange Delegation for AI Agents
Keycloak 26.8 moves token exchange delegation to preview: users consent, FGAP V2 gates the agent, and the delegated token carries…
15 min readMCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
8 min readNon-Human Identity (NHI) for AI Agents on Keycloak
A non-human identity is an identity used by software, not a person. How AI agents fit, why one shared bot…
10 min readMicrosoft Entra Agent ID vs Keycloak for AI Agent Identity
Microsoft Entra Agent ID gives AI agents directory identities. Here is how blueprints, FIC and agent OBO map to Keycloak…
13 min readOkta Agent Gateway vs Keycloak for MCP Authorization
Okta Agent Gateway puts policy inline between AI agents and MCP tools. Here is what it adds, and why MCP…
12 min readResource Access Certifications for AI Agents vs Keycloak
Okta shipped Resource Access Certifications for AI agents on 22 September 2026. What the control does, and how to run…
10 min readShadow AI Agents: Okta's Endpoint Scan vs Keycloak Inventory
Okta widened shadow AI agent discovery at Oktane 2026. Keycloak has no endpoint scanner, but it owns the chokepoint where…
9 min readAgentCore Identity Consent Portal vs Keycloak for AI Agent OAuth
AWS now hosts the OAuth consent portal for Bedrock AgentCore agents. What it removes, what it actually couples, and where…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.