Oauth 2.1

Your Insecure MCP Server Won't Survive Production — Tun Shwe, Lenses

Your Insecure MCP Server Won't Survive Production — Tun Shwe, Lenses

Lenses.io experts Tun Shwe and Jeremy Frenay discuss the significant security and design hurdles in transitioning Model Context Protocol (MCP) servers from local development to enterprise production. They introduce five core principles for secure agentic design, including shrinking the attack surface and constraining inputs, and detail the necessity of remote MCP servers with robust authentication. The talk provides an in-depth comparison of OAuth 2.1's Dynamic Client Registration (DCR) and the more secure Client ID Metadata Document (CIMD) approaches for managing agent identities, offering a roadmap for building enterprise-grade agentic AI systems with MCP.