AI Briefing#authentication
The latest AI and developer news about #authentication, with the original source and a short summary.
The latest AI and developer news about #authentication, with the original source and a short summary.
Requests using API keys, OIDC tokens, or fx login now consume Token Pass credit without needing a dedicated key, falling back to team credits when exhausted.
The feature uses deployment identity for authentication and requires @flags-sdk/vercel 1.6.0 or later.
A survey of over 1,000 SaaS vendors found only 8.4% support secure authentication, prompting Vercel to enforce OIDC standards to replace static credentials.
Starting with cloudflared 2026.9.3, developers can restrict access to local services via Quick Tunnels using a single flag without creating a Cloudflare account.
40.55% of remote MCP servers are exposed without authentication, and all servers implementing OAuth have at least one security flaw.
Keydris has released a server template that enables MCP tool calls using single-use tokens instead of API keys.
The AI SDK harness layer now supports native subscription authentication without requiring code changes.
We built an authentication architecture that unifies disparate token ingestion paths from web and app webviews into httpOnly cookies, resolving timing issues.
Vercel now provides deployment protection, previously a paid add-on, for free on all plans.
Corsair, a TypeScript library that centrally manages the tools, authentication, and permissions required for AI agents to call external services, has been released.
Vercel Connect addresses agent security issues with short-lived, runtime-based tokens.
Vercel Connect is now generally available, enabling secure connections to over 100 services using short-lived tokens at runtime.
Daangn outlines the evolution of its authentication system from SMS verification and identity confirmation to SSO and global adaptation.
Cloudflare has launched a feature to secure Workers applications with one click and set default security at the account level.
Airbnb has built Flexible Authentication, which selects authentication methods based on user and context.
Vercel has officially launched Passport, which secures deployments with its own authentication provider.
A project-scoped token feature has been added that limits permissions so access is restricted to a specific project's resources when using the Vercel API.
Vercel has introduced simple authentication and plugin integration via ChatGPT accounts.
1Password and Anthropic have launched a secure authentication feature that lets AI agents log into accounts without directly seeing passwords.
Vercel has acquired Better Auth, an open source TypeScript authentication library, to accelerate development of Agent Identity technology.
auth.md, an open protocol that helps AI agents sign up for services on behalf of users, has been released.
When using Vercel Flags in a Vercel deployment environment, automatic authentication is now possible without configuring an SDK Key.
This covers the correct authentication and key management strategies needed to prevent unexpected costs and data exposure caused by leaked API keys.
Vercel has strengthened security by issuing OIDC tokens with an Audience customized for specific services.