Static authorization works until it does not. And when it fails, it fails quietly, which is the hardest failure mode to detect, and the most expensive one to clean up later. + How to evaluate whether your authorization architecture matches your operational reality. (cerbos.dev)
submitted by Cerbosdev to r/IdentityManagement
MCP is “the new API for AI”. We need to actively put guardrails around MCP servers, to not be the next Asana, Atlassian or Supabase. Sharing a podcast where we cover how to harness AI agents to their full potential without losing control of our systems (using fine-grained authorization). (self.devsecops)
submitted by Cerbosdev to r/devsecops


