MCPIdentity: Keyless MCP Agent Authentication Patterns on Kubernetes With Keycloak…
summary
Demonstrates a concrete Keycloak 26.6 + SPIRE pattern that removes static keys for MCP agents: SPIRE issues in‑memory JWT‑SVIDs, agents generate ephemeral keys, DPoP binds tokens to the pod key, CIMD lets agents self‑register by URL, and OPA enforces a per‑call trust matrix. Validated on Kubernetes with two agents, two servers, four namespaces and zero credential files; includes reproducer scripts and two CIMD gaps filed upstream. Shows live token flow, attack replay tests, and an evolution to SPIRE‑verified federated client authentication.
AI-written summary · about
chapters (15)
- 0:00MCP agent identity challenges
- 1:08Static secrets fail for MCP agents
- 2:32Workload identity for Kubernetes MCP agents
- 4:42Keyless MCP identity with Keycloak and SPIRE
- 6:11Keyless authentication flow explained
- 10:46SPIRE integration and policy-based issuance
- 13:13Live demo: keyless MCP authentication
- 15:44Security validation and attack testing
- 16:48Keycloak CIMD gaps identified
- 17:32SPIRE identity binding for MCP agents
- 21:10Kubernetes RBAC and network policies
- 23:40Proof of concept: SPIRE-verified MCP identity
- 24:44Key takeaways from keyless MCP project
- 25:47Code availability and production steps
- 26:34Future work and closing
related talks
25mIdentities and Authentication for Your Agents With Keycloak
36mSecuring Agentic Platforms with Zero-Trust Workload Identities
25mWho Let the Agents Out? Securing AI Workflows the Right Way
26mSecure Your MCP Servers with OAuth, JWT, SPIFFE and More
32mAI Agents with Keycloak in MCP
27mKeeping Your Agents in Check: Layered Security for Agentic Platforms in Production
30mAdvancing Machine to Machine Workflows with the SPIFFE Identity Provider
11mLightning Talk: Effortlessly Integrating Keycloak Authentication To Your MCP Servers