New: Aembit + CrowdStrike Bring AI Agent Access Control & Content Inspection Together →
Get an Aembit Tenant
TALK TO AN ENGINEER

Blog

Blog Hero Bg
Industry Insights

What Are the Main Types of AI Gateways? LLM, MCP, and Agent Gateways Explained 

Dan Kaplan
Dan Kaplan Sep 2026 | 8 min read
Abstract network pathways converge on a central gateway beneath the text “A Buyer’s Guide to AI Gateways,” with Aembit branding in the corner.

8 min readGateways have long marked important boundaries in computing. Network gateways connected systems that used different protocols. Secure web gateways inspected traffic moving between employees and the internet. And API gateways gave organizations a central point for routing service requests, authenticating clients, applying policy, and recording activity. They continue to serve those functions in agentic systems, […]

The gateway label now covers several very different jobs. The useful question is what traffic each gateway handles, what decision it supports, and where identity and access fit in the architecture.
Dig in
Integration Guides

How To Create an MCP Server To Connect Your App With LLMs

Aembit Engineering
Aembit Engineering Apr 2026 | 8 min read
Industry Insights

MCP or CLI? How to Choose Right Interface for Your AI Tools

Holden Hewett
Holden Hewett Apr 2026 | 4 min read
Resources

Agentic AI Security: What It Is and Best Practices

Dan Kaplan
Dan Kaplan Feb 2026 | 12 min read

Discover More of What Matters to You

Recent Stories

Graphic for Part 2 of the MCP 2026-07-28 series, titled “Agent Interoperability,” over a simplified protocol flow diagram showing multiple clients and endpoints connected through a central MCP layer.

Tools Were Only Phase One: MCP’s Move Toward Agent Interoperability

The second in a five-part series on how MCP is moving beyond tool calling, and what that shift means for agent workflows, interoperability, and enterprise use.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
3 min read
Risks of Agentic AI

6 Cybersecurity Risks of Agentic AI (and How to Address Them)

Agentic AI introduces new cybersecurity risks, primarily concerning autonomous identity, tool chain exposure, and cascading compromises, requiring security teams to urgently adopt least-privilege identity frameworks and real-time monitoring designed specifically for self-directed, persistent workloads.
Apurva Davé
Apurva Davé
Sep 2026
|
8 min read
JWT vs. OAuth

JWT vs. OAuth: Understanding Tokens and Authorization

OAuth is an authorization framework that defines how to grant access. JWT is a token format that defines how to package and transmit claims. They solve different problems, and most production systems use both.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
OAuth vs OIDC

OAuth vs. OIDC: What’s the Difference and When Should You Use Each?

OAuth 2.0 and OIDC solve fundamentally different problems.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
6 min read
OAuth 2.0 vs 2.1

OAuth 2.0 vs 2.1: What Changed and How to Migrate

OAuth 2.1 eliminates implicit flow, mandates PKCE, and requires exact redirect matching.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
8 min read
What Identity Federation Means for Workloads

What Workload Identity Federation Means for Cloud-Native Environments

Instead of duplicating accounts or sharing credentials, one identity system can validate identities issued by another and grant access based on that trust.
Dan Kaplan
Dan Kaplan
Sep 2026
|
10 min read
Illustration of four professionals comparing a simple workload identity diagram with a large, complex engineering system of pipes, modules and machinery.

Everyone Wants SPIFFE. Almost No One Can Afford to Build It Right.

What it takes to implement it, and why real-world environments make it hard to finish.
Ashur Kanoon
Ashur Kanoon
Sep 2026
|
18 min read
Vault door

What Is Privileged Access Management (PAM)?

PAM is an intensifying interest for DevOps teams trying to bring the right set of access controls to bear on their infrastructure.
Apurva Davé
Apurva Davé
Sep 2026
|
9 min read
Diagram showing Aembit managing AI agent access to enterprise MCP servers, with human identity context and CrowdStrike AI-DR inspecting MCP content for security risks.

Aembit + CrowdStrike: More Judgment Behind Every AI Agent “Yes”

Aembit now integrates with CrowdStrike AI Detection and Response to secure MCP connections and inspect what happens after an AI agent connects.
Emma Zaballos
Emma Zaballos
Sep 2026
|
3 min read
Graphic for Part 1 of a series on the MCP 2026-07-28 specification, titled “Architectural Shift,” over a simplified protocol flow diagram showing multiple endpoints connected through a central routing layer.

MCP 2026-07-28: The Big Architectural Shift

The first in a five-part series on how MCP is changing for real-world use, and what those changes mean for teams building and securing agent systems.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
3 min read
Minimal 3D illustration of a three-legged OAuth flow connecting a user, client application, and authorization server

3-Legged OAuth (3LO) Explained: How the OAuth Flow Works

Learn how 3-legged OAuth works by building a GitHub OAuth flow and tracing authorization, consent, codes, tokens, and state.
Víctor Jiménez
Víctor Jiménez
Aug 2026
|
11 min read
Aembit graphic announcing secretless access to OpenAI, featuring the OpenAI logo and the text “Aembit Brings Secretless Access to OpenAI.”

OpenAI Workload Identity Federation: Aembit Brings Secretless Access to the OpenAI API

Aembit adds an OpenAI Workload Identity Federation Credential Provider, replacing static sk-proj-… keys with short-lived, identity-bound tokens.
Ashur Kanoon
Ashur Kanoon
Aug 2026
|
3 min read
Load More

Ready to Try Workload IAM?

Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.

Request a Demo