an agent can prove who it is. no one can say what it’s allowed to do.
MCP went from ~2M to 110M+ monthly SDK downloads in 21 months. meanwhile ~21% of companies say their agent governance is mature. stateofopensource.ai
MCP went from ~2M to 110M+ monthly SDK downloads in 21 months. meanwhile ~21% of companies say their agent governance is mature. stateofopensource.ai
Oct 6, 2026 · 7:14 PM UTC
3
2
5
1,031
MCP now requires OAuth 2.1 + PKCE. A2A ships signed Agent Cards. both answer "is this agent who it says it is?"
neither answers what a verified agent may write, or where the data it touches can go.
neither answers what a verified agent may write, or where the data it touches can go.
1
0
0
181
this is already at production scale. 28% of the Fortune 500 were running MCP in production by march 2026.
what's missing is portable permission: rules that travel with an agent across tools. if an open standard doesn't set them, closed platforms will.
full data in Mozilla’s state of Open Source AI report stateofopensource.ai
what's missing is portable permission: rules that travel with an agent across tools. if an open standard doesn't set them, closed platforms will.
full data in Mozilla’s state of Open Source AI report stateofopensource.ai
0
0
0
129
@raffi OAuth 2.1 + PKCE does answer who the agent is, and it still leaves the grant sitting at the provider. Removing the server from the client config does not kill that grant. A 401 on an old token is the check that actually shows whether access is still live.
0
0
0
19