SSO and SCIM Provisioning for AI Agent Principals
OAuth 2.0 token exchange lets enterprises track which human authorized each agent action.
Tobias Krenz
Protocol Security Editor
Tobias Krenz
Tobias Krenz holds a background in network cryptography research from his years contributing to open-source TLS tooling and later advising financial-sector red teams in Frankfurt and London. His reporting focuses on the trust boundaries and communication protocols that agentic systems rely on — and how attackers exploit them.
4 stories
JIT Credential Issuance for Ephemeral Agent Sessions
Credentials issued fresh for each agent task eliminate inherited access and automatic escalation.
Tobias Krenz
STDIO Remote Code Execution in Local MCP Servers
Local MCP servers execute commands before validating them, creating an unguarded attack surface.
Tobias Krenz
Tool Poisoning in MCP Server Registries
The protocol treats tool descriptions like trusted instructions.
Tobias Krenz