Keycloak 26.7, released this month, adds production-ready OAuth 2.1 authorization for AI agents using the Model Context Protocol, enabling per-tool scopes and eliminating the default all-or-nothing ac…
A new IETF draft, Credential Broker 4 Agents (CB4A) by Kenneth G. Hartman, published March 2026, proposes a credential brokering pattern that keeps AI agents from ever holding reusable secrets, instea…
An enterprise cloud and AI architect warns that delegation escalation, not prompt injection, is the biggest architectural risk in enterprise AI today. To secure autonomous multi-agent chains, platform…
Anthropic's Zero Trust for AI Agents framework correctly identifies that agents require stronger security than chatbots, but its recommendation of short-lived bearer tokens fails its own test of makin…