MCP Auth Deep Dive with Ex-Okta Engineer скачать в хорошем качестве

MCP Auth Deep Dive with Ex-Okta Engineer

MCP authentication got you confused? You're not alone. In this conversation, Wils Dawson (Arcade engineer, ex-Okta) breaks down MCP security in plain English. No jargon, no BS—just straight talk about why your localhost MCP server isn't ready for production. What you'll learn: The backyard BBQ vs. bar analogy that makes MCP security click Authentication vs. Authorization Why the MCP auth spec exists and when you actually need it What "production-ready MCP" really means The security risks nobody's talking about Wils brings 8+ years of auth expertise from Okta, Kong, and ngrok to explain why MCP's new auth spec matters for developers building real-world agents. Key moments: 00:00 Intros & Wils' auth background 01:00 From Okta to Arcade 03:00 MCP vs. Arcade protocols 05:00 Auth vs. Authorization explained 11:00 When you need MCP security (remote vs. local) 14:00 The admin token problem 19:00 OAuth flow complexities 25:00 Production-ready MCP requirements 29:00 Why standards matter This isn't just theory—it's practical guidance for developers who want their MCP servers to work with Cursor, Claude Desktop, and other real clients. Ready to build secure AI agents? Try Arcade: https://try.arcade.dev/mcp_security Join our Discord: https://discord.gg/rNwUvkKG MCP Auth PR #475: https://github.com/modelcontextprotocol/mo...