Episode 239 - GluuFederation/identerati-office-hours GitHub Wiki

Title: Making MCP Calls COAZy with AuthZEN

• Host: Mike Schwartz, Founder/CEO Gluu
• Guest: Alex Olivier, Co-founder & CPO Cerbos

Channels

• Linkedin Event
• Youtube Video

Description

COAZ defines how to turn application operations into AuthZEN authorization requests using declarative mappings of subjects, actions, resources, and context. COAZ-MCP applies that framework to MCP, letting tools declare how their arguments and token claims become fine-grained authorization inputs. The drafts explain how gateways or servers can enforce those decisions, use default mappings, and require multiple approvals for a single tool call.

Homework

• COAZ: A Framework for Mapping Information Models to AuthZEN Authorization Requests - Draft 1
• COAZ-MCP: COAZ Binding for the Model Context Protocol - Draft 1

Takeaways

• ⚡
• ⚡
• ⚡
• ⚡

Livestream Archive

• Audio
• Transcript