13:40
2026-09-24
dev.to
ai-agents
OAuth on MCP is not the same as authorizing each tool call
A developer argues that OAuth on the Model Context Protocol (MCP) only establishes caller identity and does not by itself authorize individual tool calls, a gap that matters as the 2026-07-28 MCP spec…