AGNTCon + MCPCon Japan 2026

As AI agents move from experimentation to production, authorization is becoming a core architectural concern. The MCP Authorization specification provides a standardized approach for protecting MCP resources and obtaining access tokens, but many developers have not yet seen these mechanisms in action.

In this hands-on workshop, participants will build a secure MCP environment using Keycloak, agentgateway, and MCP Inspector. Starting from an MCP server where all tools are publicly accessible, attendees will progressively introduce authorization controls using Keycloak and agentgateway, and observe how access to MCP tools changes.

Participants will use MCP Inspector to follow authorization flows step by step, including resource discovery, authorization server discovery, user authentication, token acquisition, authorization failures, and authorized tool invocation.

The workshop also explores Step-Up Authorization scenarios introduced in the latest MCP Authorization specification.

By the end of the session, participants will have a working MCP Authorization environment and practical experience securing MCP-based AI agent systems.

___________________________
Presentation Language: English

Captioning will be available for attendees in 50+ languages through Wordly. See instructions in each room to utilize captioning.