All the articles I've archived.
A hands-on walkthrough of enforcing OpenID AuthZEN authorization for MCP tool calls, using Agent Gateway as the Policy Enforcement Point and Keycloak as both the OpenID Provider and Policy Decision Point (PDP).
How Verifiable Credentials, Keycloak with Advanced Authentication Extensions, and the native Digital Credentials API combine to deliver phishing resistant passkey recovery, with no passwords, no QR codes, and no browser redirects.
Intent Agent Native Authorization for Agentic Profiles (IANA-AP) defines a four-phase framework that enables first-party AI agents to discover authorization requirements, compute structured intent from user prompts, obtain cryptographic human approval via Passkeys, and enforce it at execution time.
How the Agent Native Authorization (ANA) framework enforces Just-In-Time passkey approval for sensitive AI agent actions — no browser redirects, cryptographic proof, open standards.
A practical look at device-bound passkey approval for sensitive AI agent actions in Claude Code, shifting from standing session trust to action-level verification.
A real-time JIT authorization pattern for CLI-based AI coding agents, using human-in-the-loop approval, OAuth, MCP, and cryptographic proof.
How the TwoGenIdentity AuthZEN MCP Gateway protects an interactive Keycloak MCP App with standardized, externalized fine-grained authorization.
A fintech expense-management MCP App scenario showing AuthZEN-based fine-grained authorization for interactive AI workflows.
Introducing an AuthZEN plugin for Apache APISIX that turns an API and AI gateway into a standardized Policy Enforcement Point.
