Research, engineering, and practical guidance for securing AI agents in the enterprise.https://axec.dev/en-ushttps://axec.dev/blog/ai-agent-authorization/https://axec.dev/blog/ai-agent-authorization/How to authorize AI agents with explicit application identity, user consent, bounded credentials, and runtime enforcement.Thu, 20 Aug 2026 00:00:00 GMTAgent SecurityAI agentsauthorizationOAuth 2.0MCPcredential governanceAxec Teamhttps://axec.dev/blog/secure-mcp-servers-enterprise/https://axec.dev/blog/secure-mcp-servers-enterprise/A deployment-focused guide to MCP authentication, resource-bound authorization, credential isolation, and runtime controls.Wed, 19 Aug 2026 00:00:00 GMTMCPMCPenterprise securityOAuth 2.0tool authorizationcredentialsAxec Teamhttps://axec.dev/blog/agent-identity-vs-workload-identity/https://axec.dev/blog/agent-identity-vs-workload-identity/How agent identity relates to workload identity, user delegation, credentials, and authorization boundaries.Tue, 18 Aug 2026 00:00:00 GMTIdentity & Authorizationagent identityworkload identityOAuth 2.0service accountsdelegationAxec Teamhttps://axec.dev/blog/oauth-token-exchange-ai-agents/https://axec.dev/blog/oauth-token-exchange-ai-agents/When OAuth token exchange fits agent architectures, when it does not, and how to preserve resource and delegation boundaries.Mon, 17 Aug 2026 00:00:00 GMTArchitectureOAuth 2.0token exchangeAI agentsdelegationMCPAxec Teamhttps://axec.dev/blog/human-in-the-loop-authorization/https://axec.dev/blog/human-in-the-loop-authorization/Design meaningful human approval for agent authority changes and high-impact actions without creating approval fatigue.Sun, 16 Aug 2026 00:00:00 GMTAI Governancehuman in the loopAI governanceconsentagent authorizationrisk controlsAxec Teamhttps://axec.dev/blog/cedar-vs-opa-agent-authorization/https://axec.dev/blog/cedar-vs-opa-agent-authorization/A practical comparison of Cedar and Open Policy Agent for capability, resource, and context decisions in AI agent systems.Sat, 15 Aug 2026 00:00:00 GMTResearchCedarOPApolicy as codeagent authorizationRegoAxec Teamhttps://axec.dev/blog/why-ai-agents-need-identity/https://axec.dev/blog/why-ai-agents-need-identity/Identity gives agent actions attribution, credential boundaries, revocation, and a foundation for meaningful authorization.Fri, 14 Aug 2026 00:00:00 GMTIdentity & AuthorizationAI agentsidentityauthenticationauthorizationauditabilityAxec Teamhttps://axec.dev/blog/prevent-over-permissioned-ai-agents/https://axec.dev/blog/prevent-over-permissioned-ai-agents/Reduce agent authority with capability ceilings, specific consent, credential isolation, live checks, and measurable revocation.Thu, 13 Aug 2026 00:00:00 GMTAgent Securityleast privilegeAI agentscredential governanceMCPauthorizationAxec Team