Aspire

Securing .NET MCP Servers: API Keys, Microsoft Entra ID, and Agent Governance

A tour of a real .NET Aspire MCP server repo — API key auth, scope- and role-based Entra ID authorization per tool, an on-behalf-of downstream API call, and policy-driven agent governance.