Identity & Access
OAuth
Also: OAuth 2.0, delegated authorization
A standard that lets an app act on a user's behalf with limited, revocable access, without handing over the user's password.
In more detail
Remote MCP servers and many agent integrations use OAuth to connect to your accounts. Security hinges on scopes (what the token can do), token storage and handling of redirects and refresh tokens. Bugs that leak OAuth credentials give an attacker the same reach as the user.