Identity and access for agent tools

I worked with the team on authentication and access control for Magnite’s MCP gateway. The gateway needed to connect standard MCP clients while preserving the identity and account context of the person or agent making each request.

Our work included OAuth integration, downstream identity propagation, distinguishing human and agent calls, rate limiting, and durable audit logs. We addressed the security review through a series of scoped changes.