How to Design Secure MCP Deployments

A talk given by Curity's Gary Archer at the 2025 Platform Summit in Stockholm, Sweden.

So you want to grant API access to AI agents and control security? You’ve heard of the Model Content Protocol (MCP) Authorization. But how do you manage MCP in the bigger picture of your API architecture? In this lightning talk Gary will:

• Explain a deployment that enables maximum business value for your APIs.

– Summarize the benefits of an authorization-first design. – Highlight some key threats and mitigations for MCP clients. – Demonstrate an example flow and the MCP client lifecycle.