New: Aembit + CrowdStrike Bring AI Agent Access Control & Content Inspection Together →
Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Industry Insights

Enterprise at Scale: MCP’s Emerging Identity and Governance Foundation

Ashur Kanoon
Ashur Kanoon Sep 2026 | 4 min read
MCP 2026-07-28 Part 4: Governing at Scale, over a diagram of connected services and request flows.

4 min readWhat Enterprise Problems Must MCP Deployments Address? Run an agent-heavy workflow inside a real organization, and you immediately hit questions that per-user, per-tool authorization fails to address: At their core, these are infrastructure challenges that MCP deployments must address, even when the protocol does not solve them directly. The 2026-07-28 specification and stable Enterprise-Managed Authorization […]

Centralized authorization eliminates repeated user consent, but autonomous agents still need runtime policy, short-lived credentials, and audit.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

Agentic AI Security: What It Is and Best Practices

Dan Kaplan
Dan Kaplan Feb 2026 | 12 min read

Discover More of What Matters to You

Recent Stories

OpenAI, Claude, Gemini, Microsoft Copilot, and Meta AI logos displayed in a conference room overlooking a city skyline.

The OWASP Top 10 for LLM Applications (2026): What Changed and Why It Matters

The latest rankings show which risks become more pressing when a model can do more than generate an answer.
Dan Kaplan
Dan Kaplan
Sep 2026
|
9 min read
Industry Insights One

CrowdStrike AIDR Tells You What’s Risky. Aembit Tells You Who Gets Access.

Already run CrowdStrike AIDR? See how it builds on Aembit’s identity control plane for AI agents. Read the full breakdown.
Emma Zaballos
Emma Zaballos
Sep 2026
|
2 min read
“Secure Agentic AI” over a connected digital globe.

MCP Authorization: OAuth 2.1, PKCE, and Agent Identity

An employee, a scheduled agent, and a company-wide assistant may knock on the same MCP server door. They should not get in with the same badge.
Kevin Sapp
Kevin Sapp
Sep 2026
|
9 min read
Thoughtful man in glasses works on a laptop at a sunlit office table, coffee nearby, with blurred coworkers and city skyline behind him.

What is OIDC and How Does It Work?

OIDC adds identity to OAuth, giving applications a standard way to verify users, receive claims, and support modern sign-on.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
6 min read
MCP 2026-07-28 Part 3: Going Web-Native, over a diagram of connected services and request flows.

MCP’s Second Act: The Web-Native Protocol

Stateless requests, explicit state, and routing metadata bring familiar distributed-systems patterns to agent infrastructure at scale.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
4 min read
Abstract network pathways converge on a central gateway beneath the text “A Buyer’s Guide to AI Gateways,” with Aembit branding in the corner.

What Are the Main Types of AI Gateways? LLM, MCP, and Agent Gateways Explained 

The gateway label now covers several very different jobs. The useful question is what traffic each gateway handles, what decision it supports, and where identity and access fit in the architecture.
Dan Kaplan
Dan Kaplan
Sep 2026
|
8 min read
Graphic for Part 2 of the MCP 2026-07-28 series, titled “Agent Interoperability,” over a simplified protocol flow diagram showing multiple clients and endpoints connected through a central MCP layer.

Tools Were Only Phase One: MCP’s Move Toward Agent Interoperability

The second in a five-part series on how MCP is moving beyond tool calling, and what that shift means for agent workflows, interoperability, and enterprise use.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
3 min read
Risks of Agentic AI

6 Cybersecurity Risks of Agentic AI (and How to Address Them)

Agentic AI introduces new cybersecurity risks, primarily concerning autonomous identity, tool chain exposure, and cascading compromises, requiring security teams to urgently adopt least-privilege identity frameworks and real-time monitoring designed specifically for self-directed, persistent workloads.
Apurva Davé
Apurva Davé
Sep 2026
|
8 min read
JWT vs. OAuth

JWT vs. OAuth: Understanding Tokens and Authorization

OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims. They solve different problems, and most production systems use both.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
6 min read
OAuth 2.0 vs 2.1

OAuth 2.0 vs 2.1: What Changed and How to Migrate

OAuth 2.1 eliminates implicit flow, mandates PKCE, and requires exact redirect matching.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
What Identity Federation Means for Workloads

What Workload Identity Federation Means for Cloud-Native Environments

Instead of duplicating accounts or sharing credentials, one identity system can validate identities issued by another and grant access based on that trust.
Dan Kaplan
Dan Kaplan
Sep 2026
|
10 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo