#
DIFF.BLOG
New
Following
Discover
Jobs
More
Top Writers
Suggest a blog
Upvotes plugin
Report bug
Contact
About
Sign up
The home for great developer writing.
We surface the best developer writing from thousands of independent blogs, updated daily.
Join Diff.blog
TOPICS
Enterprise-Managed Authorization for your MCP server: Setting Up and Testing XAA in Auth0
·
Phat Pham
·
Aug. 20, 2026, 2:22 p.m.
Auth0
mcp-server
XAA
Authorization
Summary
This blog post guides readers on configuring Auth0 as a XAA Resource App for MCP servers, detailing the process of setting up and testing with a focus on token exchange steps.
Read full post on auth0.com →
MORE POSTS LIKE THIS
Five Reasons Why Your Auth0 Permissions Are Not in your Access Token
Phat Pham ·
Sep 3, 2026
Auth0
rbac
How to build an MCP server
Flaviocopes ·
Sep 3, 2026
typescript
mcp-server
Cedar: the access control building block that's perfectly timed for AI agents
Thestack ·
Sep 3, 2026
AWS
cedar
Security Baked Into the JVM: sixteen Subjects on the wire
nfrankel ·
Aug 23, 2026
Security
Microservices
How I Implemented Authorization in My Go App With RLS (Postgres)
Haseeb Majid ·
Aug 15, 2026
Authorization
Row Level Security
Evolving a Java MCP Server During MCP Specification Upgrades
openjdk ·
Aug 12, 2026
artificial-intelligence
Java
Discover more posts →
AUTHOR
Sponsored
Zulip
Organized team chat for people who take work seriously. Topic-based threading keeps conversations focused.
Try Zulip
Become a sponsor →
RECENT POSTS FROM THE AUTHOR
Choose how you want to continue.
Continue with GitHub
Continue with Google