Derek Tu

Finance forwards you the quarterly AI invoices and asks a reasonable question: Is this under control? Answering it takes most of a week. There is an invoice from Anthropic and …

The industry just took a real step toward governing enterprise AI agents. Anthropic, Microsoft, and Okta adopted Enterprise-Managed Authorization (EMA), a new MCP extension that lets your identity provider grant …

Hand-written Cedar policies won’t scale past a handful of MCP servers. Here’s how Stacklok Enterprise brings RBAC to ToolHive and what it looks like in practice.

It’s easy to justify static credential configuration when an MCP server starts out as a one-user, one-server setup in a developer environment. But things quickly get complicated when that server …

In enterprise MCP deployments, authentication and authorization at the MCP server don’t fully determine downstream authorization. The server still has to reach downstream systems with the right credential, the right …