MCP currently lacks authentication for mutually unknown clients and servers
David Soria Parra · One Year of MCP — with David Soria Parria and AAIF leads from OpenAI, Goose, Linux Foundation · Dec 28, 2025 · at 11:32
David Soria Parra addresses the unsolved challenge of agent-to-agent authentication across untrusted, open environments.
0:00 / 0:03exact quote · 3.2s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“But if the client and the server don't know each other, we just don't have a good solution for now.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from David Soria Parra
Other agent protocols currently lack the adoption required for AAIF inclusion
“At least on the protocol side, like a defector standards. And I don't think any of the other protocols, it feels like they're not just there yet, but of course, if they get there, then we are like super open as long as they're like complementary to what's, wha…”
Making return streams optional in Streamable HTTP was an MCP design mistake
“We got wrong that. We made a lot of things optional for the clients to do. Like you can, the client can connect and open this return stream from the server, but it doesn't have to. And the reality is, is no client does it because it's optional. And so a lot of…”
Google and Microsoft are already running MCP at millions of requests
“And we know from like some companies like the Googles of the world, the Microsoft of the world, they're doing MCP at a scale that I can't tell you the numbers, but it's like in the million of requests.”
Skills supply vertical domain expertise while MCP provides horizontal system connectivity
“What skills do, they like, they give you the domain knowledge for like a specific Set of tasks, like how you are, how you behave, how should the model behave as a data scientist, or how should the model this behave as an accountant or whatever. But MCP gives y…”
Enterprise MCP adoption is growing much faster internally than publicly visible
“In big enterprises, you see MCP everywhere. And it's actually way growing way faster than you would think because it's mostly internal to companies and without people seeing it.”
MCP strictly handles obtaining context, leaving selection and retention to applications
“And I think MCP I always see is like back to like, it's an application layer protocol. That's just how you obtain the context, how you select the context that the problem for the application. And that's the problem all the agent applications will have at the e…”