Login
Zero-Touch OAuth for MCP
(blog.modelcontextprotocol.io) by niyikiza | view | 59 comments
Registered OAuth Parameters
(iana.org) by mooreds | view | 10 comments
OAuth for Agents
(blog.exe.dev) by tosh | view | 0 comments
dcaf: An implementation of the ACE-OAuth framework
(docs.rs) by mooreds | view | 2 comments
Best Current Practice for OAuth 2.0 Security
(datatracker.ietf.org) by mooreds | view | 0 comments
The Vercel breach: OAuth attack exposes risk in platform environment variables
(trendmicro.com) by queenelvis | view | 0 comments
Show HN: OAuth Mock Server
(oauth.kogiqa.com) by ecc1 | view | 0 comments
Show HN: Mcptunnels – ngrok for MCP with basic OAuth
(terragohan.github.io) by helpprotactiniu | view | 0 comments
Show HN: OAuth 2.0 framework for MCP servers
(github.com) by bengal | view | 0 comments
Qwen OAuth Free tier will be discontinued on 2026-04-15
(github.com) by angst | view | 0 comments
Show HN: Grantex–Open authorization protocol for AI agents-like OAuth for agents
(github.com) by mishrasanjeev | view | 0 comments
Show HN: Open-source OAuth2 server Ory Hydra 25.4 ships OAuth2.1 and Device Auth
(github.com) by aeneas_ory | view | 0 comments
Hackers are abusing a Google OAuth endpoint to hijack user sessions (2024)
(itbrew.com) by transpute | view | 0 comments
Open Source Authentication for AI Agents. OIDC + OAuth 2.1
(github.com) by hkpatel3 | view | 2 comments
OAuth Device Code Phishing: Azure vs. Google Compared
(bleepingcomputer.com) by fleahunter | view | 0 comments
Show HN: Calendarpit – Local Google Calendar API and OAuth Server for Testing
(github.com) by iktakahiro | view | 0 comments
Build a Multi-Tenant MCP Server with OAuth (Clerk and Arcade)
(manveerc.substack.com) by manveerc | view | 0 comments
OAuth Scopes: Building Secure Third-Party Access for Your Platform (2025)
(fusionauth.io) by mooreds | view | 0 comments
SAP warns of maximum severity OAuth2 SSRF security flaw
(bleepingcomputer.com) by wondersky | view | 0 comments
RFC 9449 – OAuth 2.0 Demonstrating Proof of Possession (DPoP)
(rfc-editor.org) by locknitpicker | view | 0 comments
Mission-Bound Authorization for OAuth 2.0
(datatracker.ietf.org) by mooreds | view | 0 comments
OAuth Token Theft Through Microsoft's Front Door
(huntress.com) by speckx | view | 0 comments
Editors of higher education journal coauthor editorial with fake references
(retractionwatch.com) by leephillips | view | 0 comments
SwarmAuth – OAuth 2.1 for AI Agent Swarms
(pypi.org) by waspdrey | view | 0 comments
OAuth Identity and Authorization Chaining Across Domains
(datatracker.ietf.org) by mooreds | view | 0 comments
Twitch extension with 30K installs exposes users' OAuth tokens
(bleepingcomputer.com) by twapi | view | 0 comments
Choose OAuth Scopes for Wrangler and the Cloudflare API MCP Server
(developers.cloudflare.com) by cs1996 | view | 1 comments
Show HN: Oauthcli – CLI for checking/testing/verifying OAuth 2.1 servers
(github.com) by Southclaws | view | 0 comments
OAuth2 – OWASP Cheat Sheet Series
(cheatsheetseries.owasp.org) by abdelhousni | view | 0 comments
Guidelines for AI-Assisted Contributions to the OAuth WG
(mailarchive.ietf.org) by mooreds | view | 0 comments
Oura-bun: Oura client for Bun with automatic OAuth token rotation
(github.com) by joshcsimmons | view | 0 comments
From all-or-nothing to task-based OAuth consent
(blog.cloudflare.com) by officekamiya | view | 0 comments
Claude Code Stores OAuth Tokens in Plaintext
(secretspec.dev) by domenkozar | view | 0 comments
OAuth 2.1 for a personal MCP server: what three months in production changed
(aliasunder.dev) by aliascity | view | 0 comments
OAuth for Agents
(blog.exe.dev) by terryds | view | 0 comments
The Non-Orientability of OAuth (2024)
(workshop.vennfactory.com) by mooreds | view | 0 comments
An action firewall for MCP – OAuth says who, not whether the call should run
(github.com) by sinay_agenticdo | view | 0 comments
Show HN: MCP-debug-proxy – A visual reverse proxy for MCP and OAuth traffic
(github.com) by ytkoka | view | 0 comments
Show HN: I scanned 30 production MCP servers' OAuth – only 1 earned an A
(github.com) by dagni132 | view | 1 comments
Show HN: Bifrost: Enterprise MCP Gateway with Built-In Security: OAuth 2.0, RBAC
(github.com) by aanthonymax | view | 0 comments
Oauth2-proxy – proxy with authentication with Google, Azure, OpenID Connect
(github.com) by gregsadetsky | view | 0 comments
Secure Your APIs: OAuth2 and JWT for Beginners
(blog.jetbrains.com) by smokeeaasd | view | 0 comments
Show HN: SSO for PostgreSQL Using OAuth2/OIDC
(github.com) by Sathwickp | view | 0 comments
OAuth2 is a library for user authentication using OAuth/OAuth2 services
(github.com) by mooreds | view | 0 comments
Pizauth: An OAuth2 token requester daemon
(github.com) by caminanteblanco | view | 0 comments
OAuth DPoP
(fusionauth.io) by mooreds | view | 0 comments
Solving the OAuth token expiration and session fragility problem in MCP
(github.com) by MawyxxY | view | 0 comments
Is OAuth for Authentication or Authorization?
(fusionauth.io) by mooreds | view | 0 comments
Ask HN: GitHub OAuth Flows Failures?
by jakub_g | view | 0 comments
OctoPerf MCP – drive load tests from any LLM (OAuth 2.1, no API key)
(api.octoperf.com) by Jellly | view | 0 comments