Authorization

← Tags

• ArticlesSeptember 3, 2026

  Which parts of OAuth does the Strands Agents MCP client handle?

  Given nothing but a URL and client credentials, the v1.53.0 MCPClient handles OAuth (client_credentials) discovery, token acquisition, and reuse within an instance. The requested scopes, however, are not what you pass but the full set the server advertises. Verified locally with a self-hosted authorization server.

  • MCP
  • OAuth
  • Authorization
  • Strands Agents
• ArticlesAugust 21, 2026

  COAZ-MCP: authorising MCP tool calls with AuthZEN

  Notes on COAZ-MCP, the working group draft that maps MCP messages onto AuthZEN decision requests — the problem it tries to solve, how default and declared mappings work, and where it stands today.

  • AuthZEN
  • MCP
  • Authorization
• ArticlesAugust 19, 2026

  Looking into AuthZEN, a standard specification for authorisation

  Notes on AuthZEN, the authorisation standard I first came across at KubeCon + CloudNativeCon Japan 2026 — the problem it tries to solve, how it relates to OIDC, and where it stands today.

  • AuthZEN
  • Authorization
  • Security