MCP Dev Summit, Identity, and the Authorization Gap in MCP
· 17 min read
Three ThunderID team members presented at recent MCP Dev Summit events organized by the Agentic AI Foundation. Ayesha spoke at both events, and Hasini and Sahan presented together at one of them.
- Ambient Identity: Just-in-Time Authorization Patterns for the Model Context Protocol
- Who's Calling? Bringing Identity to the MCP Host
- Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
We picked these topics because they're the same problem viewed from three different altitudes. MCP still doesn't have a clean answer for who an agent is acting as when it makes a call, whether that agent is unattended, orchestrated by a host, or acting inside an enterprise on a user's behalf. That's the thread running through all three talks, and it's why we're covering them together instead of as three separate recaps.
