Your AI Agent’s Tools Just Learned to Ask Permission

by

Hiya folks, Quick one this week, prompted by a question someone asked me: “have you seen the new MCP update?” Honest answer: only just. But there’s a bit in there that lands squarely in identity territory, so figured it’s worth a plain-English write-up. If you’ve never heard of MCP (Model Context Protocol), short version: it’s … Read more

When IAM and CIAM Don’t Talk to Each Other

by
Two identity teams separated by a gap, bridges reaching toward each other

Hiya folks, Quick one on something I keep running into: IAM and CIAM teams that never actually talk to each other. Workforce IAM and customer IAM (CIAM) usually sit in different teams, sometimes different business units entirely, and they often build their identity practices like the other one doesn’t exist. I want to walk through … Read more

PSA: HTTP Finally Gets a QUERY Method (RFC 10008) — And Why IAM APIs Should Care

by
Diagram comparing HTTP GET, POST, and the new QUERY method — showing QUERY as a safe, idempotent request that supports a body

Hiya folks, Quick PSA. If you design or consume APIs, and if you’re reading this blog you probably do, this one’s worth five minutes. Not an HTTP spec expert here, just something I stumbled on that seemed worth sharing. The problem QUERY solves Quick refresher if you’re new to this (no judgment, I had to … Read more