Thursday
Room 4
11:40 - 12:40
(UTC+01)
Talk (60 min)
MCP Security: Keep Your AI Agents from Spilling the Tea
Model Context Protocol (MCP) is often referred to as "the USB-C port for AI applications". Just like REST is our go-to standard for application-to-application integrations, MCP is really running up as a more or less de facto standard for agent-to-application integrations. But how does one secure these endpoints? Just like your REST-endpoints?
We will take you through a mixture of practice (yes, we will do live demo) and theory of authentication in MCP Servers. We will look into the "how", "why" and "when".
We will also address some common pitfalls, issues and limitations, like "consent fatigue" (what is that? Join, and we'll tell you). Can you just re-use your existing RBAC thought, or does the nature of agents and MCP endpoint structure force you to start thinking different?
Make your services and data available in a whole new way, hopefully without exposing all your company's deepest secrets. Let us give you some concrete actions and bullet points for you to bring back and get started!
Awar Abdulkarim
Working at Sopra Steria Norway as a Senior Engineer and Lead for Cloud Native Competency group.
My experience and expertise covers both technical and non-technical roles and competencies. In terms of technology, working with containerized applications, Kubernetes platforms and whatever is bleeding edge and complex. Working to help people achieve a way of work, strategy and mentality which is DevOps centric. I love sharing my experiences, learning new things and apply what I know.
Manfred Bjørlin
Principal Cloud Native architect and developer with a passion for integration and automation. But wait, it's more! Passion does not only have to be in tech! There is also a burning passion for neurodiversity and diversity in tech, across ages, genders, identities, etc...
Loves integration, automation and making processes more streamlined. A back-end developer for over 20 years. Have worked with building integration platforms in the cloud for several bigger organizations. Worked with .Net since early 2000, and Azure since launch.
Have also been a team lead, worked with process streamlining, enterprise architecture and everything between that and made my hands dirty as a developer and cloud native architect.