43:I[185,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"SendEmailButton"] 45:I[63625,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"AddToLibraryButton"] 46:I[29721,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"ShareButton"] 47:I[58016,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"ProcessEpisodeButton"] 48:I[45269,["/_next/static/chunks/08z4tkzvltetr.js","/_next/static/chunks/121~yigv24_j6.js","/_next/static/chunks/0jo3du-icy6v2.js","/_next/static/chunks/15cy49d~_zsjj.js","/_next/static/chunks/0..ktetnpeix7.js","/_next/static/chunks/0_htf5~kl..m1.js","/_next/static/chunks/0i6hzvr84kc1r.js"],"SignupCTA"] 3c:["$","h1",null,{"className":"max-w-[22ch] font-display text-[clamp(32px,4.5vw,48px)] font-medium leading-[1.05] tracking-[-0.02em] text-[color:var(--fg-1)] text-balance","children":"Bringing Strong Authentication and Granular Authorization for GenAI - Dan Moore - ASW #369"}] 3d:["$","div",null,{"className":"flex flex-wrap items-center gap-x-4 gap-y-1 font-mono text-[12px] uppercase tracking-[0.1em] text-[color:var(--fg-3)]","children":[["$","time",null,{"dateTime":"2026-02-10T10:00:00.000Z","children":"February 10, 2026"}],["$","span",null,{"aria-hidden":true,"children":"·"}],["$","span",null,{"children":"01:09:24"}],false]}] 44:T4af,

When it comes to agents and MCPs, the interesting security discussion isn't that they need strong authentication and authorization, but what that authn/z story should look like, where does it get implemented, and who implements it. Dan Moore shares the useful parallels in securing APIs that should be brought into the world of MCPs -- especially because so many are still interacting with APIs.

Resources

Visit https://www.securityweekly.com/asw for all the latest episodes!

Show Notes: https://securityweekly.com/asw-369