CoPhish and the Agentic Consent Problem: OAuth Phishing for the Agent-Builder Era
CoPhish showed that an agent-building platform can itself become an OAuth phishing vector. Here's what that means for anyone building MCP servers or agent platforms, how to configure against it, and what Entra Agent ID and WorkOS Agent Auth reveal about where the industry is headed.
WorkOS Blog9 min read