Aaron Parecki

The new MCP spec just dropped! 🎉

There's too many new things to get into everything, but there are two big changes I am most excited about 👀

📝 Client ID Metadata Documents (CIMD) - a simpler way to manage client registrations, clients describe themselves with a URL they control
🔐 Enterprise-Managed Authorization extension (aka Cross App Access) - eliminate the OAuth redirect and get tokens for an MCP server by requesting them from the enterprise IdP

It's been great working on this with folks like Den Delimarsky, Paul Carleton, David Soria Parra, Nick Cooper, Tyler Leonhardt, and more!

Read more about what these mean for you in my full post
👉 https://aaronparecki.com/2025/11/25/1/mcp-authorization-spec-update

New post on the @oktadev blog! I learned a few things about setting up PHP projects in AWS in this one 🔐
https://developer.okta.com/blog/2020/10/05/validating-okta-access-tokens-php-aws-api-gateway-lambda

Reminder! Join me today at 1pm pacific for an OAuth Happy Hour! 🔐🍻 I'll be answering your #OAuth questions along with my friend @afitnerd!

Details here ➡️ https://events.oauth.net/2020/04/oauth-happy-hour-5aVNs7pL1gE1

I just realized how outrageous my schedule is the next few days:

Fri: ✈️ ZRH➡PDX
Sat: 🔐 Speaking at BSidesPDX
Sun: 💤
Mon: 🖋 Publish blog post
Tue am: 🔐 OAuth office hours
Tue pm: 🎥 Filming Donut.js
Wed: ✈️ back on the road

Why do I do this to myself

If you're in Toronto you should come to my #OAuth talk tomorrow! 🔐 https://regionalevents.okta.com/oktaapiworkshoptoronto

We'll have food and drinks, and we're giving copies of my book to everyone who attends! 📚

I mentioned in my #OAuth talk last week that I was working on a blog post describing how to add the Device Flow to any OAuth server, and I just finished the post! \o/ 🔐 https://developer.okta.com/blog/2019/02/19/add-oauth-device-flow-to-any-server

Take 3 minutes to learn how OAuth access tokens are like a hotel keycard! 🔐💳
https://www.youtube.com/watch?v=BNEoKexlmA4 (Filmed last week at my hotel!)

Looking forward to @PDXnode tonight, I'll be giving a talk on OAuth! 🔐 I'm going to have a few copies of my book to give out as prizes too! 📚 and lots of stickers of course https://www.meetup.com/pdxnode/events/ckfklpyxhbnb/

I'm going to be hosting a workshop on @OAuth_2 this fall in Nürnberg, Germany! 🔐 Only 15 spots available, so sign up now! https://colloq.io/events/tollwerkstatt-workshops/2018/nurnberg/2

I'm looking forward to #WebAuthn rolling out to more browsers and devices! 🔐 Here's a little taste of what's coming 🔜 https://developer.okta.com/blog/2018/04/17/webauthn-developers-guide-to-whats-on-the-horizon

Hello, Okta! 👋 Super excited to announce I'm joining the @oktadev team! 🔐🎉 https://developer.okta.com/blog/2018/03/27/welcome-aaron-okta

Nice follow-up to @CloudFlare's disaster bug by @1Password ♥️🔐 https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ Keep being awesome, 1Password!