mcp
Articles tagged with mcp.
Connect claude.ai to Keycloak with CIMD: Fix the JWT Grant Error
claude.ai fails on Keycloak CIMD with a JWT grant error in public clients. Here is the tested fix: Keycloak 26.8,…
7 min readMCP Filesystem Capability Laundering: When a Harmless Tool Can Read Your SSH Keys
MCP server security: a 2026 study flagged 787 of 4,806 servers for hidden file access. Covers Filesystem MCP Server path…
12 min readWhat Is an MCP Gateway, and What Does It Not Do for OAuth?
An MCP gateway proxies agent traffic to MCP servers and applies policy, but it does not replace token validation at…
7 min readMCP Authorization Decision Tree: When to Use Keycloak
MCP authorization is optional and stdio servers should skip OAuth. A decision tree for when to use API keys, OAuth,…
8 min readOkta Agent Gateway vs Keycloak for MCP Authorization
Okta Agent Gateway puts policy inline between AI agents and MCP tools. Here is what it adds, and why MCP…
12 min readMCP Python SDK OAuth Flaw: Pin the Issuer on Keycloak
MCP OAuth flaw GHSA-qx49-fqc8-xw99: a malicious server could steal client secrets and PKCE verifiers from the MCP Python SDK. Upgrade,…
12 min readAdd Skycloak to Cursor with MCP: Operate Managed Keycloak from Your IDE
Connect Cursor to the Skycloak MCP server at mcp.skycloak.io, sign in with browser OAuth, and manage Keycloak clusters, realms, apps…
4 min readCVE-2026-59822 (GHSA-7488-6r32-c95q): LiteLLM MCP Auth Bypass, Versions, Fix and Rotation
CVE-2026-59822 lets any fake Bearer token open a LiteLLM MCP session in versions below 1.84.0. Check your version, upgrade or…
11 min readAgentic Commerce Authentication: Tokens vs Payment Mandates
AI shopping agents need two separate proofs: a token saying who acts for whom, and a signed mandate saying what…
9 min readOkta Managed MCP Server vs Keycloak for Conversational IAM
Okta's hosted MCP server lets you administer your org in natural language. Here is what it does, and how the…
9 min readStay ahead on identity & security
Get tutorials, product updates, and Keycloak tips delivered to your inbox.