SOURCE-LINKED INTELLIGENCE

Zero-Trust Authorization and Discovery for Enterprise MCP

arXiv · AI, language, vision and robotics · article · Sep 18, 2026 · UTC

LLM agents translate natural-language context, which may include attacker-controlled text, into privileged tool calls, so authorization must remain effective even when an agent is prompt-injected or adversarially steered. The Model Context Protocol (MCP) has become a widely adopted interface for this boundary, yet its official SDKs' authentication and authorization primitives fall short of enterprise zero-trust requirements, most acutely a dual-persona model in which one server must serve human users (corporate SSO) and automated agents (service-account credentials on a different header). We c

Read original source ↗ Open in workspace

recordType

paper

region

Global