I need a feature that allows seamless integration of OAuth for AI agents executing tools, ensuring proper user identity and permissions are maintained throughout the process.
While experimenting with MCP servers recently, I ran into an interesting authorization problem. When an AI agent calls a tool, the request path usually looks like: User → AI interface → MCP client → MCP server → application backend That means the MCP server isn’t receiving requests directly from the user anymore. Instead, it’s receiving them through an AI client that is acting on behalf of the user. The tricky part is making sure the server still knows: • who the user is • which client is acting for them • what permissions apply to that tool execution OAuth works well for propagating identity, but the MCP server still needs to enforce its own authorization rules. Wrote a breakdown of how OAuth fits into MCP servers and some security pitfalls developers should avoid.