Blog

The Model Context Protocol (MCP) is an open specification that simplifies connecting AI models (like Claude) to external tools and data sources.

Enable 3rd-party authentication via “Sign in with [Your App],” Identity Delegation, and Machine to Machine tokens.

Any service using xml-crypto or a Node.js SAML implementation using it, should update immediately to the latest version. WorkOS customers are safe and were not impacted.

The GAIA (“Generalized AI Agent” benchmark) helps us evaluate AI agent performance across complex tasks

Manus is a fully autonomous AI system designed to run asynchronously in the cloud—no repeated prompts, no babysitting.

Confused by all the token jargon? This article simplifies JWS, JWE, JWK, and JWKS, showing you how each one ensures your data stays secure and trustworthy.

OAuth vulnerabilities can be tricky, but we’re here to help! Learn about common attacks and how to protect your app with simple tips from RFC 9700.

Composio.dev is a developer-focused integration platform that simplifies how AI agents and large language models (LLMs) connect with external applications and services.

Cursor Rules are instructions or system prompts passed to the large language models (LLMs) that Cursor uses. Learn how to leverage them effectively.

Tired of bots wreaking havoc on your website? Learn how JavaScript tagging can help you track suspicious behavior and stop malicious activity in its tracks.

Learn why traditional database encryption just doesn’t cut it anymore and why application-level encryption is the real hero for data security.

Anthropic’s release of Claude Code, built on the 3.7 Sonnet model, marks a significant step in AI-assisted development.

Modern authentication flows use tokens to convey information about a user and whether that user is allowed to interact with specific resources.

FGA Playground, Notifications, and AuthKit with Laravel Cloud

In January 2025, the IETF published RFC 9700: Best Current Practice for OAuth 2.0 Security. We read it and summarized the best practices you should follow to keep your OAuth implementation safe.