kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default
kagent v0.10.0 went GA on September 4. Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works at …
Read more →#MCP
4 posts
MCP Agent Identity: One Spec Shipped, Three Still Open
The Model Context Protocol roadmap published on August 22 names agent identity and enterprise-ready security as a priority workstream, with four specific …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →Multi-Tenant MCP Federation with agentgateway
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →