Post

Duende Software
@duendesoftware.com

🛠️ .NET Devs: The MCP RC brings a great DCR update! SEP-837 advises declaring OIDC application_type to validate redirect URIs with precision (e.g., enforcing HTTPS for web). Grab the C# code to implement this easily in our newest post: duendesoftware.com/blog/2026073...

duendesoftware.comHardening OAuth in the newest 2026-07-28 MCP Release CandidateThe MCP 2026-07-28 release candidate tightens OAuth security for AI agents. Analyze the spec changes and implement them with Duende IdentityServer.

0 reposts0 likes

Dean Lee
@deanlee.info

That OIDC detail is a good example of security becoming part of agent unit economics. The cheap demo assumes trust is free. Production keeps adding verification, logging, consent, and rollback costs.