Making OAuth Scale Securely for MCPs - Aaron Parecki - ASW #360
9 December 2025 - 1 hour 7 minsThe MCP standard gave rise to dreams of interconnected agents and nightmares of what those interconnected agents would do with unfettered access to APIs, data, and local systems. Aaron Parecki explains how OAuth's new Client ID Metadata Documents spec provides more security for MCPs and the reasons why the behavior and design of MCPs required a new spec like this.
Segment resources:
https://aaronparecki.com/2025/11/25/1/mcp-authorization-spec-update https://www.ietf.org/archive/id/draft-ietf-oauth-client-id-metadata-document-00.html https://oauth.net/cross-app-access/ https://oauth.net/2/oauth-best-practice/ Visit https://www.securityweekly.com/asw for all the latest episodes!
Show...
Series Episodes
Airline Zoom Calls,Pix, Windows, TP-Link, AgentCorruption, OSS Scanner, Josh Marpet - SWN #623
34 mins
9 October Finished
Building Quantum Safe Security as AI Safety and Governance Won't Save You - Vijay Viswanathan - BSW #468
59 mins
7 October Finished
Typing, textGrain, NetScaler, Fortinet, Copilot, LibreOffice, Dots, Aaran Leyland - SWN #622
30 mins
6 October Finished
Getting Granular with Access, Attributes, and Intent - Alex Olivier - ASW #403
1 hour 10 mins
6 October Finished
State of the AI SOC, regulating AI, and can AI agents feel pain? - Aqsa Taylor - ESW #479
1 hour 43 mins
5 October Finished
