authorization

The Model Context Protocol got auth right, but that doesn’t mean you should implement it yourself. Here’s why API gateways are usually the better choice, and what that really costs you.

MCP authorization spec now requires RFC 8707 implementation to prevent token misuse and phishing attacks. Here’s how the resource parameter works and why it matters for your MCP deployments.

See how the latest Visual Studio Code Insiders builds seamlessly integrate with both new and legacy MCP authorization specs, offering a frictionless developer experience for accessing protected MCP servers with any OAuth provider.

Learn how to protect Model Context Protocol (MCP) servers from confused deputy attacks when implementing Dynamic Client Registration, and how Azure API Management can help mitigate these security risks.

A super-quick overview of the new MCP authorization specification and how it improves security and flexibility for MCP servers.