← Back to DevOps
Weekly · DevOps · Week of May 25, 2026

Auth0 Ships MCP Auth GA + HashiCorp Vault, Speakeasy, Vercel | Development SaaS Recap 2026

Generated 6d ago

Auth0 shipped Auth for MCP to GA, HashiCorp added native AI agent support in Vault, and Speakeasy's Gram landed issuer-gated remote MCP — agent identity went from sketch to product this week in development SaaS.

Auth0 made Auth for MCP generally available, packaging CIMD client registration, On-Behalf-Of token exchange, and OAuth resource-parameter compatibility into a single gate that sits between agents and every MCP server — no shared secrets, no over-privileged service accounts.

HashiCorp announced native AI agent support in Vault: trusted identities for non-human actors, delegated authorization, ephemeral OAuth-bound tokens, and end-to-end tracing of what an agent did with whose credentials. Early access is open now, public beta lands this summer.

Speakeasy's Gram release turned each MCP server into its own OAuth issuer with full dynamic client registration, authorize, token, and revoke endpoints, plus a mid-task re-auth relay so assistants can hand users an OAuth link without losing the run. Vercel Sandbox became a supported runtime for Claude Managed Agents, moving Anthropic-hosted agents onto Vercel infrastructure as a real deployment target.

GitHub shipped staged npm publishing to GA with new install-time controls, splitting releases into a two-phase flow. Stirling PDF 2.9.0 added server-side file sharing and alpha group signing, and Appsmith 2.0 bundled MongoDB 7 with a mandatory upgrade path through v1.99.

---

Mentioned in this video: • Auth0 — Auth for MCP hits GA with CIMD, OBO token exchange, and OAuth resource parameters • HashiCorp Vault — Native AI agent identities, delegated authorization, and ephemeral OAuth-bound tokens • Speakeasy Gram — Issuer-gated remote MCP, per-server OAuth, mid-task re-auth relay • Vercel — Vercel Sandbox becomes a supported runtime for Claude Managed Agents • GitHub — Staged npm publishing GA with install-time dependency gates • Stirling-PDF — 2.9.0 adds server-side file sharing and group signing (visual + certificate) • Appsmith — 2.0 ships with MongoDB 7 bundled, mandatory upgrade through v1.99

---

More weekly development SaaS recaps: https://sparkpulse.io/development

Subscribe for weekly development product updates.