From the course: Unboxing AI: Build a Remote MCP Server from Zero to Deployed with OAuth
Unlock this course with a free trial
Join today to access over 24,900 courses taught by industry experts.
Why authorization and security matter - OAuth Tutorial
From the course: Unboxing AI: Build a Remote MCP Server from Zero to Deployed with OAuth
Why authorization and security matter
- The whole purpose of MCP is to give language models some of the capabilities we have so that we get more agentic AI. We get AI systems that can act on our behalf. Now, there are two parts to that. One is, an MCP server can retrieve content for us and add context to the model, thereof, the model context protocol. And the other part is that the way MCP servers are built, they can have tool capabilities, meaning they can go out in the world and do things on our behalf. I've already demonstrated how those tool capabilities work. I did a demo where I had Claude control my hue lights. I've also shown you how the MCP protocol can be used to retrieve data, modify data in different ways. And that has significant implications. Because when we build interfaces to data and to systems, the assumption has always been that the entity doing the interaction that actually makes a real world change is a person. As someone is sitting there clicking a button, or typing into a form field, or doing…
Contents
-
-
-
-
-
- (Locked) Why authorization and security matter1m 53s
- (Locked) The MCP authorization spec4m 23s
- (Locked) Implementing MCP authorization2m 44s
- (Locked) The MCP OAuth 2.0 flow visualized4m 22s
- (Locked) Best-practices for MCP authorization5m 8s
- (Locked) Options for MCP authorization5m 32s
- (Locked) MCP and security46s
- (Locked) MCP security risk: Vibe coding2m 26s
- (Locked) MCP security risk: Excessive permisisons3m 20s
- (Locked) MCP security risk: Agent error1m 53s
- (Locked) MCP security risk: Prompt injection2m 29s
- (Locked) MCP security risk: Confused deputy1m 42s
- (Locked) MCP security risk: Session hijacking1m 16s
- (Locked) Authorization and security are job #12m 3s
- (Locked)
-
-