The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for MCP Dev Summit North America to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration..
IMPORTANT NOTE: Timing of sessions and room locations are subject to change.
Sign up or log in to add sessions to your schedule and sync them to your phone or calendar.
When an AI agent holds your OAuth token, what stops it from acting beyond your intent? We'll cover why OAuth 2.1 alone isn't enough for agentic AI, how the industry is responding (NIST, IETF, major identity vendors), and how to implement delegation that gives agents scoped, auditable, revocable permission to act on behalf of users.
Founding Identity Engineer at Runlayer, where the job is making sure AI agents don't do things they shouldn't, even when they've been told they can. Background in distributed, auth, and identity systems at Intel.
Vitor Balocco is co-founder of Runlayer. Previously, Vitor was a Staff AI Engineer at Zapier and is a recognized MCP expert, speaking at international conferences on vulnerabilities and defense.
