Securing MCP Servers with Spring AI
Join Dan Vega as he sits down with Spring Security expert Daniel Garnier-Moiroux to explore the critical world of MCP (Model Context Protocol) server security. As MCP has taken over the AI world, enterprise deployments need robust security and permission management for exposed endpoints Securing MCP Servers with Spring AI. Daniel walks through his approach to securing MCP Servers with OAuth2 access tokens and how Spring AI applications can leverage the spring-ai-community/mcp-security project Securing MCP Servers with Spring AI. Learn why proper authentication isn't optional when exposing AI tools and resources, discover best practices for implementing authorization servers, and understand how to protect your MCP endpoints from vulnerabilities. Whether you're building private or enterprise MCP servers, this episode delivers essential security insights for the Spring AI ecosystem.
Listen to This Episode
Watch This Episode
Show Notes
Learn why proper authentication isn't optional when exposing AI tools and resources, discover best practices for implementing authorization servers, and understand how to protect your MCP endpoints from vulnerabilities. Whether you're building private or enterprise MCP servers, this episode delivers essential security insights for the Spring AI ecosystem.
Show Notes:
- Blog Post: Securing MCP Servers with Spring AI
- Daniel Garnier-Moiroux
More from Season 4
Year in Review
Join Dan Vega and DaShaun Carter for the Season 4 finale of Spring Office Hours! In this special episode, the hosts look back on an incredible year in the Spring ecosystem. They'll revisit their 2025 predictions from Episode 1, did they nail it or miss the mark? From the release of JDK 24 and 25 to Spring Boot 4, Spring Framework 7, and Spring AI reaching GA, it's been a landmark year. The guys will also reflect on 35 episodes of great conversations, conference highlights from JavaOne to SpringOne, and celebrate the community that made it all possible.
OpenTelemetry with Spring Boot
Dan and DaShaun sit down with Spring Team member Brian Clozel to discuss OpenTelemetry (OTEL) and how to leverage it in your Spring Boot applications. Learn how OTEL provides a vendor-neutral standard for collecting telemetry data including traces, metrics, and logs to gain deeper observability into your applications.
The Fundamentals of Software Engineering with Nate Schutta
Dan welcomes architect, author, and speaker Nate Schutta to discuss "The Fundamentals of Software Engineering", an upcoming book Nate and Dan are co-authoring together. Get an inside look at what inspired the book, the essential concepts every developer should master, and what readers can expect from this collaborative project.