Login
Zero-Touch OAuth for MCP
(blog.modelcontextprotocol.io) by niyikiza | view | 59 comments
Registered OAuth Parameters
(iana.org) by mooreds | view | 10 comments
OAuth for Agents
(blog.exe.dev) by tosh | view | 0 comments
dcaf: An implementation of the ACE-OAuth framework
(docs.rs) by mooreds | view | 2 comments
Best Current Practice for OAuth 2.0 Security
(datatracker.ietf.org) by mooreds | view | 0 comments
The Vercel breach: OAuth attack exposes risk in platform environment variables
(trendmicro.com) by queenelvis | view | 0 comments
Show HN: Mcptunnels – ngrok for MCP with basic OAuth
(terragohan.github.io) by helpprotactiniu | view | 0 comments
Show HN: OAuth 2.0 framework for MCP servers
(github.com) by bengal | view | 0 comments
Qwen OAuth Free tier will be discontinued on 2026-04-15
(github.com) by angst | view | 0 comments
Show HN: Grantex–Open authorization protocol for AI agents-like OAuth for agents
(github.com) by mishrasanjeev | view | 0 comments
Show HN: Open-source OAuth2 server Ory Hydra 25.4 ships OAuth2.1 and Device Auth
(github.com) by aeneas_ory | view | 0 comments
Hackers are abusing a Google OAuth endpoint to hijack user sessions (2024)
(itbrew.com) by transpute | view | 0 comments
Open Source Authentication for AI Agents. OIDC + OAuth 2.1
(github.com) by hkpatel3 | view | 2 comments
OAuth Device Code Phishing: Azure vs. Google Compared
(bleepingcomputer.com) by fleahunter | view | 0 comments
Oura-bun: Oura client for Bun with automatic OAuth token rotation
(github.com) by joshcsimmons | view | 0 comments
From all-or-nothing to task-based OAuth consent
(blog.cloudflare.com) by officekamiya | view | 0 comments
Claude Code Stores OAuth Tokens in Plaintext
(secretspec.dev) by domenkozar | view | 0 comments
OAuth 2.1 for a personal MCP server: what three months in production changed
(aliasunder.dev) by aliascity | view | 0 comments
OAuth for Agents
(blog.exe.dev) by terryds | view | 0 comments
The Non-Orientability of OAuth (2024)
(workshop.vennfactory.com) by mooreds | view | 0 comments
An action firewall for MCP – OAuth says who, not whether the call should run
(github.com) by sinay_agenticdo | view | 0 comments
Show HN: MCP-debug-proxy – A visual reverse proxy for MCP and OAuth traffic
(github.com) by ytkoka | view | 0 comments
Show HN: I scanned 30 production MCP servers' OAuth – only 1 earned an A
(github.com) by dagni132 | view | 1 comments
Show HN: Bifrost: Enterprise MCP Gateway with Built-In Security: OAuth 2.0, RBAC
(github.com) by aanthonymax | view | 0 comments
Oauth2-proxy – proxy with authentication with Google, Azure, OpenID Connect
(github.com) by gregsadetsky | view | 0 comments
Secure Your APIs: OAuth2 and JWT for Beginners
(blog.jetbrains.com) by smokeeaasd | view | 0 comments
Show HN: SSO for PostgreSQL Using OAuth2/OIDC
(github.com) by Sathwickp | view | 0 comments
OAuth2 is a library for user authentication using OAuth/OAuth2 services
(github.com) by mooreds | view | 0 comments
Pizauth: An OAuth2 token requester daemon
(github.com) by caminanteblanco | view | 0 comments
OAuth DPoP
(fusionauth.io) by mooreds | view | 0 comments
Solving the OAuth token expiration and session fragility problem in MCP
(github.com) by MawyxxY | view | 0 comments
Is OAuth for Authentication or Authorization?
(fusionauth.io) by mooreds | view | 0 comments
Ask HN: GitHub OAuth Flows Failures?
by jakub_g | view | 0 comments
OctoPerf MCP – drive load tests from any LLM (OAuth 2.1, no API key)
(api.octoperf.com) by Jellly | view | 0 comments
OAuth 2.0 Demonstrating Proof-of-Possession at the Application Layer (DPoP) (2023)
(datatracker.ietf.org) by locknitpicker | view | 0 comments
Cloudflare launched self-managed OAuth for all
(blog.cloudflare.com) by terryds | view | 0 comments
Shipping an OAuth-protected remote MCP server: the spec and 3 security bugs
(skilldb.dev) by dev_chad | view | 0 comments
Show HN: No-OAuth Stripe Fee Auditor from Balance CSVs
(feeauditor.com) by Ksantor | view | 1 comments
Show HN: CalendarPipe – programmable calendar sync via OAuth or email invites
(calendarpipe.com) by jukben | view | 0 comments
Klue OAuth breach victim list grows as Icarus hackers claim attack
(bleepingcomputer.com) by parable | view | 0 comments
Show HN: AuthPlane – OAuth 2.1 and PKCE authorization server for MCP
(github.com) by AuthPlane | view | 0 comments
OAuth proves who you are. Wallet auth proves what you hold
(insumermodel.com) by dcborthwick | view | 0 comments
Show HN: Rnet-OAuth-Python – Python lib for user-funded AI API access
(github.com) by nextma | view | 0 comments
Alexandre Dumas Coauthor and Intellectual Property Lawsuits
(clubstorica.substack.com) by remiko | view | 0 comments
RFC 9396: OAuth 2.0 Rich Authorization Requests
(ciamweekly.substack.com) by mooreds | view | 0 comments
Webrings as Collective OAuth
(isaaccorbrey.com) by speckx | view | 0 comments
AI has no OAuth equivalent for billing delegation – here's an open spec
(github.com) by marcjohnston | view | 0 comments
Personal apps with no back end: static site and OAuth PKCE and OpenRouter
(type2fun.net) by msyea | view | 0 comments
Authmeta.dev – the OAuth inspector you wish you had
(authmeta.dev) by buildwithdennis | view | 0 comments
Spotify no OAuth,no premium web API fetching
by nntlol | view | 0 comments