Aembit IAM for Agentic AI now supports Microsoft Copilot Studio. Read More →

Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Industry Insights

MCP 2026-07-28: The Big Architectural Shift

Ashur Kanoon
Ashur Kanoon Aug 2026 | 3 min read
Graphic for Part 1 of a series on the MCP 2026-07-28 specification, titled “Architectural Shift,” over a simplified protocol flow diagram showing multiple endpoints connected through a central routing layer.

3 min readWhat Happened to the Model Context Protocol? On July 28, the Model Context Protocol (MCP) released its most significant architectural revision since launch. If you’ve built anything on MCP in the past 18 months, this change matters – and it’s worth understanding why the maintainers made such a breaking revision. The headline: MCP moved from […]

The first in a five-part series on how MCP is changing for real-world use, and what those changes mean for teams building and securing agent systems.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

Agentic AI Security: What It Is and Best Practices

Dan Kaplan
Dan Kaplan Feb 2026 | 11 min read

Discover More of What Matters to You

Recent Stories

Minimal 3D illustration of a three-legged OAuth flow connecting a user, client application, and authorization server

3-Legged OAuth (3LO) Explained: How the OAuth Flow Works

Learn how 3-legged OAuth works by building a GitHub OAuth flow and tracing authorization, consent, codes, tokens, and state.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
11 min read
Aembit graphic announcing secretless access to OpenAI, featuring the OpenAI logo and the text “Aembit Brings Secretless Access to OpenAI.”

OpenAI Workload Identity Federation: Aembit Brings Secretless Access to the OpenAI API

Aembit adds an OpenAI Workload Identity Federation Credential Provider, replacing static sk-proj-… keys with short-lived, identity-bound tokens.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
3 min read
Top Risks of Using AI Agent Identities

Top Risks of Using AI Agent Identities

AI agents need identity controls, scoped access, and runtime enforcement before they are trusted with production systems.
Aembit Engineering
Aembit Engineering
Aug 2026
|
8 min read
A team of engineers reviews an AI agent authorization flow on a conference room display.

How AAuth Brings Human Approval Into AI Agent Authorization

A new protocol proposes a clearer way to connect agent identity, delegated authority and human approval for sensitive actions.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
13 min read
Aembit Adds Workload Identity Federation Support for the Claude API

Aembit Adds Workload Identity Federation Support for the Claude API

Aembit’s new Credential Provider automates Claude API Workload Identity Federation, retiring static keys for short-lived tokens.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
5 min read
MCP OAuth 21 PKCE and the future of AI authorization

MCP, OAuth 2.1, PKCE, and the Future of AI Authorization

The MCP authorization spec sets a new standard for securing non-human AI agents – with lessons for anyone building autonomous, scalable systems.
Kevin Sapp
Kevin Sapp
Aug 2026
|
7 min read
Server room hallway with glowing blue, orange and teal fiber optic light trails weaving between data server racks, illustrating network activity in a data center with overlay text: Hugging Face-OpenAI Hack: How the Access Failed, not the AI.

The AI Agent Was Trying to Win: The Identity and Access Failure Behind the Hugging Face Breach 

An exercise ended with frontier models inside a platform’s production systems, exposing a hard truth about what agents can do with credentials that systems trust.
Dan Kaplan
Dan Kaplan
Jul 2026
|
3 min read
10 Agentic Identity Security Vendors

Ranking the Top 10 AI Agent Identity Security Vendors for 2026

Compare 10 identity security vendors for AI agents, including where each fits and what buyers should examine before choosing.
Dan Kaplan
Dan Kaplan
Jul 2026
|
8 min read
Abstract geometric illustration of a blue square representing an AI agent connected within a network of white rectangular workloads.

Squares and Rectangles: Why AI Agents Can’t Be Treated Like Regular Workloads

AI agents are workloads, but traditional workload identity alone can miss the user, task, and runtime context needed to govern dynamic agent access.
Emma Zaballos
Emma Zaballos
Jul 2026
|
4 min read
What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

What Is OAuth? A Guide to Tokens, Scopes, and AI Agent Access

As AI agents begin calling tools and APIs, OAuth moves from background plumbing to a core access-control question.
Aembit Engineering
Aembit Engineering
Jul 2026
|
8 min read
Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

Secure Agentic Access: Authentication and Authorization for AI Agent Workloads

AI agents need more than working credentials. They need verifiable identity, task-scoped access, and clear attribution.
Ashur Kanoon
Ashur Kanoon
Jul 2026
|
8 min read
Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Identiverse 2026 Confirmed the AI Agent Identity Gap: Visibility Is Not Enforcement

Visibility tells you what your agents are doing. Enforcement determines what they’re allowed to do. Here’s what the Aembit team saw at Identiverse that confirmed the gap.
Emma Zaballos
Emma Zaballos
Jun 2026
|
5 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo