Blog

A practical guide to securing MCP model–agent interactions: prevent prompt injection, privilege escalation, replay attacks, and data exfiltration with validation gateways, signing, DLP, and scoped creds.

SAML certificates don’t work the same way as web SSL certificates. Here’s why self-signed certificates are the secure, standard choice for SAML, and when a CA-signed certificate might still make sense.

A guide to understanding air-gapped environments, why enterprises rely on them, and how WorkOS can deliver modern authentication even in the most isolated deployments.

The WorkOS team recently hosted a 2-day Enterprise MCP hackathon with approximately 100 attendees.

Discover the top 5 Auth0 alternatives in 2025 — including WorkOS, Microsoft Entra ID, Amazon Cognito, Firebase Authentication, and Keycloak — with a head-to-head comparison and migration tips.

Step-by-step tutorial on integrating Single Sign-On, Multi-Factor Authentication, and Passwordless login into your .NET app with WorkOS.

A developer-friendly guide to Proof Key for Code Exchange (PKCE): how it works, the problems it solves, and why it’s essential for secure OAuth flows, regardless of the application type.

By creating a central catalog of available servers, the MCP Registry has solved the discovery problem—but that's only half the equation. The real challenge lies in authentication.

Learn the best practices for implementing multi-factor authentication (MFA), from reducing MFA fatigue to improving user experience, with guidance for both B2C and B2B apps.

MCP-UI represents more than an incremental improvement to agent interfaces—it's a fundamental shift toward interactive, context-aware AI systems that can deliver rich experiences directly within conversational flows.

Product engineers don’t just write code, they own the whole delivery lifecycle.

Representatives from OpenAI and Anthropic discuss the origins of MCP, early adoption challenges, security concerns, and the future of AI tool integration at MCP Night 2.0.

Marissa Felix and Kenneth Sinder from Notion's API team demonstrate how their MCP server bridges the gap between documentation and implementation, enabling developers to go from product requirements to working code with a single prompt.

Harald Kirschner from VSCode/GitHub shares how they systematically identified and solved the five biggest MCP pain points, transforming the developer experience from frustrating to delightful.

New this month: Standalone OAuth for MCP, Feature Flags API, BYOK in Vault, disposable email blocking, & more