Introducing Oauth for AI Agents
Blog post from Polar Signals
Since the launch of the MCP, users have faced challenges accessing it due to the requirement of creating a project token, which necessitates an "Owner" role, limiting access primarily to privileged users. This token system was initially intended for data pushing to Polar Signals Cloud but was misappropriated for MCP, creating a paradox where users could query data but needed higher privileges to use MCP. To address this, MCP has adopted Oauth, which allows users to authenticate using their identity to issue profiling data queries, eliminating the need for long-lived tokens and manual invalidation. This implementation simplifies access, enabling users to query profiling data through their preferred MCP clients using Oauth, with guidance provided through an in-product documentation page for various AI integrations, such as Claude Code and Cursor. Further authentication and authorization improvements are anticipated.