<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Security on PandaEatsBamboo</title><link>https://pandaeatsbamboo.com/series/security/</link><description>Recent content in Security on PandaEatsBamboo</description><generator>Hugo</generator><language>en</language><lastBuildDate>Thu, 15 Oct 2026 11:27:29 +0530</lastBuildDate><atom:link href="https://pandaeatsbamboo.com/series/security/index.xml" rel="self" type="application/rss+xml"/><item><title>S in MCP stands for Security - Security Mechanism in MCP framework (oAuth)</title><link>https://pandaeatsbamboo.com/posts/mcpseries-2/</link><pubDate>Sun, 20 Jul 2025 00:00:00 +0000</pubDate><guid>https://pandaeatsbamboo.com/posts/mcpseries-2/</guid><description>&lt;blockquote&gt;
&lt;p&gt;Focuses on &lt;strong&gt;security in MCP&lt;/strong&gt;. Observes MCP’s expanded attack surface and need for robust auth. Describes updated MCP spec with &lt;strong&gt;OAuth 2.1 flows&lt;/strong&gt;, OAuth resource server classification for MCP, &lt;strong&gt;dynamic client registration&lt;/strong&gt;, PKCE enforcement, resource indicators, and JSON-RPC batching. Shows a &lt;strong&gt;proof-of-concept integration&lt;/strong&gt; of MCP with Entra ID for token verification in FastMCP&lt;/p&gt;
&lt;/blockquote&gt;</description></item></channel></rss>