Technical updates, security advisories, and the philosophy behind infrastructure-level permissions at Permitly.
MCP server authorization
MCP server authorization
MCP Authorization Server Metadata Explained for AI Agent Builders
If you're building on the Model Context Protocol (MCP) and trying to get your authorization flow right, the authorization server metadata document is where everything starts. Get it wrong and your age...
MCP Server Authorization Header: Setup and Best Practices
What Is the MCP Server Authorization Header
The MCP server authorization header is an HTTP header sent with requests to authenticate and authorize access between an MCP (Model Context Protocol) client...
What Is MCP Server Authorization?
MCP (Model Context Protocol) server authorization is the process of verifying that a client or agent has the right to access specific resources and tools exposed by a...
MCP Author Guidelines: Building Consent-Aware Servers
Building an MCP server means you're not just shipping a tool — you're shipping a decision-maker. When an AI agent invokes your server on behalf of a user, it's acting with delegated authority. That de...
Agent Permissions: A Complete Guide
What Are Agent Permissions?
Agent permissions define what actions an AI agent, bot, or automated process is authorized to perform within a system. They govern acces...
What LLM Application Developers Need to Know About Agent Consent
Building an LLM application is no longer just about prompt engineering and model selection. As soon as your app takes autonomous actions on a user's behalf — sending emails, booking appointments, modi...
LLM Tools for Developers: Building Safe, Compliant AI Agents
The LLM developer ecosystem has exploded in the last two years. Frameworks, SDKs, model APIs, and tool-calling standards have made it faster than ever to ship an AI agent. But speed has outpaced safet...
LLM Infra Developers: Building the Consent Layer for AI Agents
If you're deep in the LLM infrastructure stack — wiring up orchestration layers, managing tool calls, optimizing latency — you've probably treated user consent as someone else's problem. A checkbox in...
As AI assistants become more capable, developers need structured ways to connect them to external tools and data sources. The Model Context Protocol (MCP) was designed to solve exactly that problem. T...
Most AI agent builders ship fast. You spin up a LangChain pipeline, wire it to a few APIs, add some memory, and you have something that acts on a user's behalf. Calendar invites, emails, Slack message...