[{"data":1,"prerenderedAt":16},["ShallowReactive",2],{"blog-tag-en-keycloak":3},[4],{"path":5,"title":6,"description":7,"date":8,"tags":9},"\u002Fblog\u002Fen\u002Fai-agent-authentication-kubernetes-keycloak-spiffe","Don't Hand AI Agents the Keys. A Keyless Design for Authenticating MCP Servers on Kubernetes","Handing AI agents static API keys is an operating model that eventually breaks down. This article explains why static secrets hit a wall when running MCP servers on Kubernetes, and how Keycloak combined with SPIFFE\u002FSPIRE enables a 'keyless' authentication design.","2026-08-18",[10,11,12,13,14,15],"k3s","kubernetes","ai-agent","mcp","keycloak","zero-trust",1787649525038]