openid / openid/fapi

Is FAPI 2.0 being used in Agentic AI flows (MCP?)

Open
#849 5 comments 0 reactions 1 assignee View on GitHub

@dpostnikov is already working on this.

Since Aug 26, 2026.

Dominant language
HTML
Stars
3
Forks
3
PR merge metrics
No merged PRs in 30d

Description

I raised this question in a FAPI working group call a few weeks ago and had a reminder to add an issue once the baseline was migrated to github.

My question is around whether we've seen deployments use FAPI to protect access to MCP servers? Or if there is a need for a higher security API profile in the agentic space? If so, is there any guidance the FAPI working group would want to produce?

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.