Tag · 4 articles

OAuth 2.1

Feb 21, 2026 · 6 min read

MCP OAuth 2.1 Authentication: How AI Agents Securely Connect to Tools

MCP OAuth 2.1 authentication explained with the Discovery Trifecta, mandatory PKCE, token audience binding, and IdP compatibility. Complete guide for securing AI agent connections.

Feb 16, 2026 · 7 min read

OAuth 2.1 Security Best Practices: Mandatory PKCE and Token Binding

Learn OAuth 2.1 security best practices including mandatory PKCE and Token Binding. Get hands-on with code examples and secure your applications.

Jun 4, 2025 · 3 min read

OAuth 2.1: What’s Changing and Why It Matters

OAuth 2.1 brings significant changes to authorization. Learn what's new, why it matters, and how it impacts your DevOps security strategy.

Jun 4, 2025 · 3 min read

How OAuth 2.1 Refresh Tokens Work: Best Practices and Expiry

OAuth 2.1 refresh tokens: rotation on every use, reuse detection to catch stolen tokens, expiry lifetime config, and sender-constrained tokens for API security.