TL;DR An AI agent calling your tools is a client like any other, and it needs a token. With Spring Security 7 your MCP server becomes an OAuth 2.1 Resource Server, and each tool declares the scope it
Senior Backend Engineer · Java, Go & AI (MCP) · Building production-grade systems
Senior Software Engineer with 14+ years building backend systems in Java (8 to 25) and Spring Boot, now also working with Go. I write about MCP, AI agents, cloud-native architecture, observability and taking systems to production. Based in Colombia.
Markdown supported · ⌘↵ to post
No responses yet.