Strata AI Identity Gateway: Ephemeral 5-Second TTL Credentials for MCP Servers with OAuth 2.0 Delegation Semantics

Strata·medium signal

Strata's Maverics platform implements the industry's first enterprise-grade identity governance for MCP servers at scale. Key technique: per-task ephemeral credentials with 5-second TTL eliminate privilege drift — every tool invocation gets a fresh, minimal-privilege token. OAuth 2.0 token exchange carries both agent and delegating user identity via an 'act' claim. Research shows a typical 10,000-person org runs 3,056 MCP server deployments (15.28% of employees × 2 servers each) with zero governance.