Comment by luka2233

XAA is a great improvement to where we were in 2025. It helps track user access to mcp tools. There is a few other ongoing efforts in the IETF community. Eg; https://datatracker.ietf.org/doc/draft-niyikiza-oauth-attenu... (implementation: https://github.com/tenuo-ai/tenuo)