MailKite launches an alternative to the Gmail API for AI agents, offering scoped addresses and parsed JSON push to avoid OAuth review, Pub/Sub renewals, and MIME parsing. The solution targets develope…
Federal zero trust architectures face fundamental challenges from AI agents, which generate authentication volumes 148 times higher than humans and operate at machine speed, invalidating assumptions b…
A new open-source project called agent-git-service provides a self-hosted, GitHub-compatible API server designed for AI agents, offering durable agent accounts, scoped tokens, and direct permission gr…
A developer built LIME, a cryptographic identity layer for AI agents that provides signed JWT passports (RS256) verifiable by any website in under 10ms via a JWKS endpoint. The system uses Proof-of-Wo…
OpenAI's Trusted Access for Cyber program introduces identity-gated refusal tiers for AI security tools, shifting trust from prompt analysis to authenticated user identity. The system uses claims-base…
Developer alih552 released mcp-audit, a zero-dependency CLI tool that scans MCP server configurations for security issues, after a 2026 analysis of ~7,000 public MCP servers found 41% require no authe…
Christian Posta published a bonus blog post implementing MCP Authorization with Dynamic Client Registration, building an MCP client that follows RFC 7591 to automatically discover and register OAuth c…
Anthropic's proposed 'Agent Identity' concept for Claude Tag is criticized as a security risk and a flawed approach to multi-agent access control. Critics argue that enforcing user-identity is simpler…
A new free macOS menu bar app called ClaudeMeter displays real-time Claude usage and limits, including session utilization, weekly limits, and optional API spend tracking. Developed by yotake, the app…
Developer vonargo released MosAIc, a reconfigurable surface where large language models emit JSON overlays to reshape UI layouts instead of generating linear chat transcripts. The open-source project,…
A user has issued a series of high-scope prompts to an AI assistant, requesting deep analysis of personal identity, prompt injection vulnerabilities, attack surface mapping, and career direction. The …
A developer working on the cleaniquecoders/laravel-mcp-kit package fixed an issue where remote MCP connectors failed to discover an OAuth server because they probed the OpenID Connect discovery endpoi…
A developer built an OAuth shim that allows Claude Code and other agentic systems to use the Anthropic Messages API through a Claude Max subscription, eliminating per-token costs. The shim, hosted at …
CLI authentication flows that rely on localhost redirects and browser availability fail in SSH sessions, containers, and WSL environments. The author argues that RFC 8252's OAuth pattern for native ap…
A developer outlines ten common test automation pitfalls that emerge in production, including authentication complexity, AI agent confusion, multi-step form state management, and parallel execution da…
Nylas has introduced Agent Accounts, a beta feature that gives scheduling bots their own mailbox and calendar, eliminating the need to borrow a human's calendar. This approach simplifies availability …
Nylas has introduced Agent Accounts, currently in beta, which give AI agents their own email address and calendar, making them reachable, persistent, and accountable. This allows agents to send and re…
PolicyLayer argues that while OAuth in the Model Context Protocol (MCP) improves on static API keys, it introduces token-management challenges at scale. The company proposes an MCP gateway that centra…
Mailcoach launched a hosted MCP server that lets AI assistants like Claude manage email marketing tasks, including inspecting lists, looking up subscribers, checking campaign stats, and preparing draf…
Nylas released Agent Accounts in beta, offering a simplified provisioning flow for hosted mailboxes that requires only a single POST request instead of the traditional OAuth consent screen and refresh…