Gergely Danyi
Latest research and insights

From MCP Tool Filtering to Runtime Access Control
Tool-level filtering alone is not access control.

OAuth scopes don’t equal secure MCP authorization
OAuth scopes solve an important part of the authorization puzzle: delegated capability. But they are only one piece. To do MCP authorization properly, you need scopes for the big picture and server-side RBAC for least-privilege enforcement.

The ServiceNow AI breach: Why agentic access requires layered defense
The ServiceNow breach is a wake-up call. As we deploy more autonomous agents with access to critical business systems, we need authorization architectures designed specifically for the agentic paradigm not retrofitted from traditional security models.

Technical Deep Dive: Runtime Access platform for Agents
The P0 Authz Control Plane for Agents lets developer and security teams control access for agentic applications that connect to internal data sources, such as a Postgres, Snowflake, Mongo database through a chat interface.

Just-in-time ephemeral database access
The p0 approach to just-in-time ephemeral database access streamlines …

Scalable user authentication for Kubernetes clusters with OpenID Connector
A real-world guide for setting up federated identity using OpenID Conn…

Security features for Kubernetes
P0’s Kubernetes integration grants temporary access to sensitive resou…