Oauth
3 articles
MCPAI agent security
How to secure MCP OAuth discovery against SSRF
A practical review plan for hosted MCP clients: validate discovery destinations, bind DNS checks to connections, control redirects and test with mock services.
HOLMCPAI agent security
What is MCP token passthrough? Risks and safer designs
Learn why accepting and forwarding tokens not issued for an MCP server breaks authorization boundaries, with an example, review worksheet and proposed tests.
HOLCVEF5
F5 BIG-IP APM OAuth RCE hits CISA KEV
CVE-2026-94127 affects BIG-IP APM virtual servers configured as OAuth Authorization Servers. Apply the F5 engineering hotfix for your branch.
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.