Tag

auth

2 entries.

1. 26 Sept

   A browsing agent inherits localhost

   An Origin allowlist for 127.0.0.1 does not stop JavaScript that a local agent just rendered.

   • isolation
   • agents
   • auth
   • threat-model
2. 25 Sept

   A valid token is not your audience

   A signature and expiry check does not prove the token was issued for this MCP server.

   • governance
   • agents
   • auth
   • threat-model