New: Aembit + CrowdStrike Bring AI Agent Access Control & Content Inspection Together →
Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Industry Insights

Personal AI Agents Are Coming to Work, and They’re Walking Out With Your Secrets

Apurva Davé
Apurva Davé Oct 2026 | 6 min read
AI agent working at a laptop with access to workplace apps including email, calendar, Slack, Notion, GitHub, and AWS.

6 min readPersonal agents are about to test whether enterprises know who, or what, is using their credentials.

Personal agents are about to test whether enterprises know who, or what, is using their credentials.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

What is AI Agent Security? 4 Best Practices to Start With

Dan Kaplan
Dan Kaplan Feb 2026 | 12 min read

Discover More of What Matters to You

Recent Stories

Hands exchanging keys beneath the text “Understanding Token Exchange for AI Agents."

What is Token Exchange, and Why Does AI Need it?

Víctor Jiménez
Víctor Jiménez
Sep 2026
|
8 min read
Two professionals reviewing a secrets management dashboard, with text reading “Ranking the Top Secrets Managers & Alternatives (2026).

Ranking the Top Secrets Management Tools and Alternatives in 2026

Secrets managers still matter. But AI agents and workloads are changing when stored credentials make sense.
Dan Kaplan
Dan Kaplan
Sep 2026
|
5 min read
A swarm of futuristic AI humanoids rushes a glowing security barrier at the entrance to a brightly lit data center, visually representing agents pushing past authorization controls.

Barbarians at the Gate: The Authorization Assumption That Agents Are Tearing Down

Broad credentials made sense when fixed application logic stood between users and actions, but AI agents have changed that equation.
Apurva Davé
Apurva Davé
Sep 2026
|
4 min read
Graphic for Part 5 of Aembit’s MCP 2026-07-28 series, titled “The Agent Interoperability Layer,” with a network diagram of connected components in the background.

MCP as an Application Protocol: The Emerging Agent Interoperability Layer

What began as a way for agents to call tools is expanding into infrastructure for longer-running, governed interactions across enterprise systems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
5 min read
Promotional graphic showing the Aembit dashboard with the Credential Providers section open and an Atlassian MCP EMA configuration form on screen. Some sensitive fields are intentionally blurred. A banner across the bottom reads, “Aembit Now Supports Okta Cross App Access,” set over a dark purple background with abstract connected-line graphics and orange gradient spheres.

How Aembit Makes Cross App Access Usable Before the Rest of the Stack Catches Up 

XAA removes a growing source of agent friction, but uneven support across the enterprise ecosystem makes the transition the harder problem to solve.
Emma Zaballos
Emma Zaballos
Sep 2026
|
4 min read
Graphic comparing impersonation vs. delegation, with human and AI agent identity cards representing different ways an actor can access resources on behalf of a user.

Impersonation vs. Delegation: Getting On-Behalf-Of Tokens Right

When one identity acts for another, the token model determines what downstream systems can actually see, trust, and audit.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
7 min read
MCP 2026-07-28 Part 4: Governing at Scale, over a diagram of connected services and request flows.

Enterprise at Scale: MCP’s Emerging Identity and Governance Foundation

Centralized authorization eliminates repeated user consent, but autonomous agents still need runtime policy, short-lived credentials, and audit.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
4 min read
OpenAI, Claude, Gemini, Microsoft Copilot, and Meta AI logos displayed in a conference room overlooking a city skyline.

The OWASP Top 10 for LLM Applications (2026): What Changed and Why It Matters

The latest rankings show which risks become more pressing when a model can do more than generate an answer.
Dan Kaplan
Dan Kaplan
Sep 2026
|
9 min read
Industry Insights One

CrowdStrike AIDR Tells You What’s Risky. Aembit Tells You Who Gets Access.

Already run CrowdStrike AIDR? See how it builds on Aembit’s identity control plane for AI agents. Read the full breakdown.
Emma Zaballos
Emma Zaballos
Sep 2026
|
2 min read
“Secure Agentic AI” over a connected digital globe.

MCP Authorization: OAuth 2.1, PKCE, and Agent Identity

An employee, a scheduled agent, and a company-wide assistant may knock on the same MCP server door. They should not get in with the same badge.
Kevin Sapp
Kevin Sapp
Sep 2026
|
9 min read
Thoughtful man in glasses works on a laptop at a sunlit office table, coffee nearby, with blurred coworkers and city skyline behind him.

What is OIDC and How Does It Work?

OIDC adds identity to OAuth, giving applications a standard way to verify users, receive claims, and support modern sign-on.
Víctor Jiménez
Víctor Jiménez
Sep 2026
|
6 min read
MCP 2026-07-28 Part 3: Going Web-Native, over a diagram of connected services and request flows.

MCP’s Second Act: The Web-Native Protocol

Stateless requests, explicit state, and routing metadata bring familiar distributed-systems patterns to agent infrastructure at scale.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
4 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo