The Agent Identity Problem: Why OAuth Isn't Enough for MCP
When an AI agent calls a tool, three principals are involved but only one has an identity. OAuth authenticates the user — but not the agent’s intent. Here’s what enterprise auth architecture for MCP actually needs, and how to build toward it without waiting for the ecosystem to figure it out.