Build-a-Bot Workshop - Enabling Trusted Agents With SPIRE + MCP

Learn to build secure AI agents with trusted workload identity through this hands-on workshop that combines OAuth 2.0, SPIFFE, and emerging MCP standards. Explore the critical security challenges facing agentic platforms in cloud-native environments, where determining "who is allowed to do what, and why" becomes paramount as AI agents interact with various tools and services. Work directly with a complete agentic stack that integrates MCP (Model Context Protocol) for agent tool-calling capabilities, SPIRE for robust workload identity management, and Keycloak for comprehensive user management. Discover how to implement granular access control mechanisms and establish rich audit trails across the entire agentic workflow, ensuring both security and transparency in agent operations. Master the fundamentals of identity-first, zero-trust agentic platforms by combining strongly attested workload identity from SPIFFE with the flexibility of OAuth 2.0 authentication frameworks. Gain practical experience with cloud-native security tools and learn to address the unique challenges of maintaining security and transparency in AI-driven applications, all while requiring no prior experience with these technologies.