Driving pi with computer using ChatGPT sessions
How I use ChatGPT tasks to organize persistent Pi sessions, connect MCP tools, bridge gaps with computer use, and deliver work without losing context.
WorkOS Blog9 min read
Model Context Protocol
16 stories
PixelLeak explained: How coding agents leaked 13,000 screenshots
AI coding agents put internal screenshots from more than 300 organizations on public GitHub. No model broke. The agents used permissions nobody meant to give them, to finish a task nobody thought was risky.
WorkOS Blog6 min read
Figma MCP 403 Forbidden: Why client_name allowlists fail
igma's remote MCP server admits clients by the client_name they send during dynamic client registration. Why that check proves nothing, what CIMD fixes and what it doesn't, and what to gate on instead.
WorkOS Blog11 min read
Three MCP auth bugs in 30 days, one root cause: Trusting what the other side said
The MCP Python SDK, the Rust SDK (rmcp), and LiteLLM each accepted authentication input that nobody verified. Here is what broke, who is affected, and the checklist that closes the gap.
WorkOS Blog10 min read
Debugging ChatGPT plugins beyond the screenshot
Diagnose failed assistant actions across host, MCP tool, backend, and source of record with privacy-conscious evidence, safe replay, and a ticket template.
WorkOS Blog7 min read
MCP Events in ChatGPT: Why an event subscription is a credential
ChatGPT is adding draft MCP Events support. Why a subscription is a credential, how revocation works, and what your MCP server must store.
WorkOS Blog11 min read
Is this the AI era's App Store moment? Not yet
Compare the App Store’s launch with OpenAI plugins across discovery, trust, payments, portability, and gatekeeping, and see where the analogy fails today.
WorkOS Blog5 min read
MCP gateways compared: Cloudflare, Okta, Auth0 and Microsoft
Cloudflare, Okta, Auth0 and Microsoft all offer MCP gateways now. A side-by-side comparison of where each one sits, how it handles auth and logging, and what your MCP server still needs to do.
WorkOS Blog10 min read
Set up the WorkOS MCP server in every coding agent with one command
How workos mcp install configures Claude Code, Codex, and Cursor, why configured is not the same as authenticated, and the failure modes worth knowing.
WorkOS Blog7 min read
The AI agent permissions checklist for SaaS apps (2026)
A practical, testable list of controls for letting AI agents act on your users' data without handing them the keys.
WorkOS Blog15 min read
The MCP SDK just shipped DPoP and scope challenges. Here's what to do about it.
A first look at how the official Model Context Protocol SDK is turning the 2026-07-28 spec's authorization hardening into code, and what it means for anyone running an MCP server.
WorkOS Blog5 min read
CoPhish and the Agentic Consent Problem: OAuth Phishing for the Agent-Builder Era
CoPhish showed that an agent-building platform can itself become an OAuth phishing vector. Here's what that means for anyone building MCP servers or agent platforms, how to configure against it, and what Entra Agent ID and WorkOS Agent Auth reveal about where the industry is headed.
WorkOS Blog9 min read
Bifrost's MCP flaw shows the protocol still has no client-authentication story
Two critical vulnerabilities, one root cause, and the piece of MCP that is supposed to close this gap.
WorkOS Blog5 min read
What 15,465 ungoverned MCP servers tell us about the authorization gap
A new registry audit counted servers, not security controls. The number matters more than it sounds like it should.
WorkOS Blog7 min read
One token, two jobs: ID-JAG in enterprise access and agent registration
The same token type is solving two unrelated problems. Knowing which one you are in decides what you build.
WorkOS Blog7 min read
Delete the MCP servers and the agent is back to a long-lived key in a shell
The case against MCP is right about ergonomics and quiet about authorization. Here is what has to exist before direct API access is a safe default.
WorkOS Blog9 min read
Showing 16 of 16 stories
You're all caught up.
AiByts Weekly Brief
Get the top AI news and tools straight to your inbox every week.
Weekly · AI news from WorkOS Blog
Join 15,000+ AI enthusiasts