AgentsNEWEnterprise securityTestingHuman in loop: unclear
AWS and Keyfactor publish an X.509 identity blueprint for MCP agents
AWS notes MCP has no built-in authentication standard and shows signed request envelopes, user-signed delegations, RFC 8693 audience-scoped tokens and live OCSP revocation, with source code.
Why it matters: Without agent identity, AWS warns, any component could impersonate an agent; this shows how to prove which agent acted for which user, and revoke it quickly.
On the Frontier watch →From Drop #037 · Wed, Oct 21 · Morning