VkusVill has upgraded its MCP server with OAuth 2.0 authorization, enabling AI agents to access personalized order data and real-time inventory based on user location.
Managing API token lifecycles requires moving away from insecure client-side storage toward server-side session management to mitigate risks like XSS and token theft.
Anthropic users report token theft via compromised session keys, with some accounts being used by third-party services to perform tasks for others.
Individual developers face complexities when connecting AI agents to Google Workspace due to Google Cloud's corporate-centric design and lack of Personal Access Tokens.
