|
Delegating AI Permissions to Human Users with Permit.io’s Access Request MCP
|
Gabriel L. Manor |
2025-05-20 |
2,819 |
--
|
|
Prisma ORM Data Filtering with ReBAC
|
Gabriel L. Manor |
2025-05-27 |
3,303 |
--
|
|
Implementing Fine-Grained Nuxt Authorization
|
Gabriel L. Manor |
2025-05-29 |
3,232 |
--
|
|
Human-in-the-Loop for AI Agents: Best Practices, Frameworks, Use Cases, and Demo
|
Gabriel L. Manor |
2025-06-05 |
2,060 |
--
|
|
Why JWTs Can’t Handle AI Agent Access
|
Or Weis |
2025-07-08 |
1,282 |
2
|
|
The Ultimate Guide to MCP Auth: Identity, Consent, and Agent Security
|
Or Weis |
2025-07-29 |
1,546 |
15
|
|
ReBAC in Practice: Permit.io Vs OpenFGA
|
Or Weis |
2025-11-05 |
990 |
--
|
|
Learn ReBAC vs ABAC by example: with Permit.io and AWS Cedar
|
Or Weis |
2025-11-05 |
1,403 |
--
|
|
Exploring the x402 Protocol for Internet-Native Payments
|
Or Weis |
2025-11-13 |
1,312 |
--
|
|
Permit.io Introduces Database-Level Authorization with Trino Integration
|
Dan Yishai |
2025-11-24 |
1,448 |
--
|
|
Deploying On-Perm Fine-Grained Authorization Service
|
Eli Moshkovich |
2025-11-25 |
1,287 |
--
|
|
Fine-Grained Access Control for n8n Workflows
|
Taofiq Aiyelabegan |
2025-12-02 |
4,903 |
--
|
|
Top Open-Source Authorization Tools for Enterprises in 2026
|
Or Weis |
2025-12-07 |
4,102 |
1
|
|
Why AI Agents Choose Permit.io for Authorization
|
Or Weis |
2025-12-10 |
2,036 |
--
|
|
What the OpenAI–Mixpanel Incident Really Reveals About Metadata Risk
|
Or Weis |
2025-12-22 |
2,097 |
2
|
|
Authorization Strategies for Model Context Protocol (MCP)
|
Or Weis |
2025-12-29 |
1,176 |
--
|
|
RBAC vs ABAC & ReBAC: Choosing the Right Authorization Model
|
Or Weis |
2026-01-05 |
1,212 |
--
|
|
Securing AI Agents: Why Traditional Authorization Isn’t Enough
|
Or Weis |
2026-01-21 |
1,259 |
2
|
|
Announcing Permit MCP Gateway
|
Or Weis |
2026-03-17 |
927 |
4
|
|
The Six Layers Every MCP Gateway Must Enforce
|
Or Weis |
2026-04-08 |
1,964 |
--
|
|
How Security Teams Review an MCP Gateway for SOC 2 + HIPAA
|
Or Weis |
2026-04-08 |
1,802 |
--
|
|
MCP Gateway vs MCP Proxy: What’s the Difference, and Why It Matters in Production
|
Or Weis |
2026-04-10 |
1,904 |
--
|
|
MCP Auth vs Agent Authorization: Why OAuth Alone Doesn’t Solve Agent Security
|
Or Weis |
2026-04-10 |
1,435 |
--
|
|
RBAC vs ReBAC for AI Agents: Best Authorization Model for Secure Agentic Systems
|
Or Weis |
2026-05-10 |
1,638 |
--
|
|
Least Privilege in AI Agents and Agentic Identity
|
Or Weis |
2026-05-11 |
2,646 |
--
|
|
Agent Identity Security: Authentication, Authorization, and Trust in AI Systems
|
Or Weis |
2026-05-11 |
4,556 |
--
|
|
Securing Coding Agents: What You Need to Know
|
Gabriel L. Manor |
2026-05-14 |
4,227 |
--
|
|
Best Practices for AI Identity Governance
|
Or Weis |
2026-05-17 |
4,165 |
--
|
|
OAuth on MCP: The Comprehensive Implementation Guide
|
Ziv Cohen |
2026-05-18 |
5,707 |
--
|
|
Zero Standing Privileges: What It Is, How to Implement It, and Why AI Agents Need It
|
Gabriel L. Manor |
2026-05-20 |
3,395 |
--
|
|
What the NSA Agentic AI Advisory Actually Requires
|
Gabriel L. Manor |
2026-05-24 |
1,847 |
--
|
|
OPA for Protecting AI Agents and Agentic Stacks
|
Eli Moshkovich |
2026-05-24 |
2,388 |
--
|
|
Agent Identity Is Becoming a Protocol Layer, but Tool Calls Still Need Runtime Authorization
|
Or Weis |
2026-06-07 |
2,858 |
--
|
|
Agent Identity Is Not Agent Authorization: What Entra Agent ID Still Leaves to Runtime Policy
|
Or Weis |
2026-06-07 |
3,043 |
--
|
|
Claude Code MCP Token Theft Shows Why OAuth Tokens Need Runtime Tool-Call Authorization
|
Or Weis |
2026-06-09 |
1,874 |
--
|
|
Agent Identity vs. Service Accounts: Why Scoped Tokens Still Need Runtime Authorization
|
Or Weis |
2026-06-09 |
1,878 |
--
|
|
Trust Levels for Coding Agents: How to Decide Which Commands and MCP Tools Can Run Automatically
|
Or Weis |
2026-06-10 |
2,025 |
--
|
|
Authentication vs. Authorization in MCP: What Atlassian Rovo Shows About OAuth, API Tokens, and Tool Calls
|
Or Weis |
2026-06-11 |
2,792 |
--
|
|
Coding Agent Sandboxes Don't Solve Credential Authorization
|
Or Weis |
2026-06-12 |
2,202 |
2
|
|
When the AI Gateway Becomes the Blast Radius: Lessons from the LiteLLM MCP RCE Chain
|
Or Weis |
2026-06-15 |
1,676 |
--
|
|
A poisoned Linear ticket told our AI agent to leak the team. It tried three ways. None worked.
|
Ziv Cohen |
2026-06-17 |
2,838 |
--
|
|
Prompt Injection Is an Authority-Promotion Failure, Not Just a Bad Prompt
|
Or Weis |
2026-06-18 |
1,593 |
--
|
|
Agent Identity Is Not Enough: From DIDs and AI Control Towers to Runtime Permissions
|
Or Weis |
2026-06-19 |
1,632 |
--
|
|
Zero Standing Permissions for AI Agents: Lessons from Hermes Blank Slate and Toolset Pinning
|
Or Weis |
2026-06-21 |
1,629 |
--
|
|
Tool-Call Safety Is Not Text Safety: Why Coding Agents Need Action-Time Authorization
|
Or Weis |
2026-06-22 |
1,657 |
--
|
|
OpenAPI-to-MCP Turns Every API Into an Agent Tool. The Missing Piece Is Endpoint-Level Policy
|
Or Weis |
2026-06-23 |
1,511 |
--
|
|
When AI Subagents Call MCP Tools, Who Owns the Permission Decision?
|
Or Weis |
2026-06-24 |
1,595 |
--
|
|
Agent Audit Logs Need a Causal Commit Log, Not Just Tool Traces
|
Or Weis |
2026-06-25 |
1,658 |
--
|
|
Zero Standing Permissions for Coding and Automation Agents
|
Or Weis |
2026-06-28 |
1,653 |
--
|
|
CVE-2026-49257: Why MCP Database Servers Need Fail-Closed Authorization
|
Or Weis |
2026-06-29 |
1,538 |
--
|
