mcp
Articles tagged with mcp.
MCP Filesystem Capability Laundering: When a Harmless Tool Can Read Your SSH Keys
MCP server security: a 2026 study flagged 787 of 4,806 servers for hidden file access. Covers Filesystem MCP Server path…
12 min readWhat Is an MCP Gateway, and What Does It Not Do for OAuth?
An MCP gateway proxies agent traffic to MCP servers and applies policy, but it does not replace token validation at…
7 min readMCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
8 min readOkta Agent Gateway vs Keycloak for MCP Authorization
Okta Agent Gateway puts policy inline between AI agents and MCP tools. Here is what it adds, and why MCP…
12 min readMCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak
MCP OAuth flaw GHSA-qx49-fqc8-xw99: a malicious server could steal client secrets and PKCE verifiers from the MCP Python SDK. Upgrade,…
12 min readAdd Skycloak to Cursor with MCP: Operate Managed Keycloak from Your IDE
Connect Cursor to the Skycloak MCP server at mcp.skycloak.io, sign in with browser OAuth, and manage Keycloak clusters, realms, apps…
4 min readCVE-2026-59822: LiteLLM's MCP Auth Bypass, and the Second Bug in the Same Fix
CVE-2026-59822 let any fabricated Bearer token open a LiteLLM MCP session. The two separate bugs one pull request closed, and…
11 min readAgentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min readOkta Managed MCP Server vs Keycloak for Conversational IAM
Okta's hosted MCP server lets you administer your org in natural language. Here is what it does, and how the…
9 min readKeycloak CIMD for MCP: Client ID Metadata Documents for Claude Code and VS Code
Keycloak has shipped experimental CIMD support since 26.6 behind the cimd flag. Here is the client policy that lets Claude…
11 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.