Standards & Regulation
OpenID, IETF and the specifications and rules shaping enterprise identity. Review windows, draft analysis, and what each change will mean once it lands in practice.
standards & regulation · ai & agent identity
The new MCP specification makes agent tool calls something you can actually govern
Stateless requests, the method and tool name exposed in HTTP headers, and a tighter OAuth story. MCP is moving from convenient to controllable.
standards & regulation · ai & agent identity
The AI agent authorization draft, explained
OAuth, workload identity and consent records, assembled into one model for agents acting on your behalf. It is one person's draft, not a standard.
standards & regulation
Three identity standards are open for comment, and one is now published
Three OpenID Foundation windows close between 19 August and 15 September. Plus the CSA AI Controls Matrix, now published in full.