Tag
Kent C. Dodds announces a significant shift in Kody with the release of v2026.08.10, adding built-in OAuth integrations that let operators provision shared OAuth apps via a new admin console.
Eric Lawrence critiques Cloudflare's new Wallet signup flow, noting how it closely resembles consent phishing attacks, illustrating why web security is difficult.
Developers building AI agents that post to social media face significant approval hurdles from TikTok, Instagram, and YouTube, including audits, business verification, and quota fights, which often take weeks.
MCP-Billing is a tool that integrates OAuth 2.1 and usage-based Stripe billing for MCP servers, simplifying monetization for AI model endpoints.
The author explains the differences between SSO, OAuth, OIDC, and SAML, clarifying that SSO is a user experience, OAuth is for authorization, OIDC provides identity on top of OAuth, and SAML is an older enterprise protocol.
An open-source OAuth 2.0 authentication server you can host yourself, supporting Google, GitHub, email login, custom providers, and modern deployment platforms. It's recommended for backend engineers to learn how modern auth systems work.
A developer reflects that the hardest part of building AI automations for businesses is not the workflow design but managing integrations, permissions, and building client trust around system access.
A CLI tool called relay-ai acts as a proxy for Codex Desktop and Claude Code, enabling users to route requests to any model (including GLM 5.2) using their own API keys or OAuth subscriptions, with features to prevent crashes and manage context overflow.
Cloudflare launched self-managed OAuth for all customers, allowing developers to create and manage OAuth clients for delegated API access, improving security and scalability of the Cloudflare app ecosystem.
The Enterprise-Managed Authorization extension for MCP is now stable, allowing organizations to centrally manage authorization for MCP servers and enabling zero-touch OAuth for end-users. Adopted by Anthropic, Microsoft, and Okta.
This article critiques the common OAuth loopback authentication pattern used by many CLI tools, which fails on headless machines, and advocates for alternative methods like device code flow that have been standard since 2019.
Nango is an open-source integration platform with built-in authorization management for over 800 mainstream APIs, helping simplify OAuth authorization and token refresh processes and reducing redundant work.
A personal health MCP server that gives AI agents like OpenClaw access to real health and performance data from wearables (Oura, Garmin, WHOOP, etc.) via a unified interface and OAuth device-code flow.
We shipped an MCP server where agents inherit human identity, implementing OAuth 2.1 federation and per-IdP claim mappers to solve agent identity management and RBAC policy evaluation.
Discussion of best practices for storing and managing OAuth tokens used by AI agents to call third-party services, covering token refresh, revocation, and scope drift.
xAI's SuperGrok subscription now integrates with Hermes Agent via OAuth, enabling access to Grok 4.3, text-to-speech, image/video generation, and X search without separate API keys or billing.
Hermes Web UI updated to v0.5.28, adding xAI Grok OAuth login with support for SuperGrok subscriber authorization, and introducing Bridge session-level model settings and other improvements.
Clawvisor is a new authorization layer for AI agents that enables secure access to apps like Gmail and Slack without exposing credentials or allowing rogue actions, solving key safety issues in agent deployment.
A Roblox cheat infected a Context.ai employee with Lumma Stealer, which led to compromised OAuth credentials being used to breach Vercel's internal systems, exposing non-sensitive environment variables and highlighting risks of broad AI tool OAuth permissions.
Logto is an open-source auth infrastructure for SaaS and AI apps, supporting OIDC, OAuth 2.1, SAML, multi-tenancy, enterprise SSO, and RBAC.