News for hackers. Stuff that matters.

b4timer

The audit evidence is hash chained and we allow for it to be exported off platform. Currently s3 bucket is supported. Additionally, we allow for normal csv-based exports. Would be interested to know what centralized log collection services you use.

Show HN: Authorize MCP tool calls without giving agents the credentials

https://github.com/keydrisLabs/mcp-auth-keydris-template

Hey HN, Adam here.We built a small MCP example around a single problem:How do you let an agent use a tool that needs credentials without giving the credentials to the agent?The demo has two tools. One is open. One is protected.When the agent calls the protected tool, Keydris checks the policy first:ALLOW → run the tool REJECT → stopThe credential stays on the server. The agent never sees it.We...

( Read More... | 8 comments | on HN )