Welcome to the talk on Agentic Access, covering MCP, Zero Trust Security, and Identity-Aware Proxy. MCP offers a standardized interface for LM agents, while Zero Trust ensures continuous authentication and context-aware enforcement. The Identity-Aware Proxy enforces authentication, authorization, and context-aware policies. Policy Engine checks ensure secure access to internal resources through authentication and proxy validation. Transitioning from human to agentic access requires adherence to MCP security best practices like using proxies, validating tokens, and auditing access. VPNs, although common, pose security and access control challenges, prompting the need for a secure tool exposure approach. Placing MCP servers behind a proxy ensures secure access. VPNs pose limitations for securing MCP servers, especially with hosted services like Cloud or ChatGPT. Integration of OAuth into MCP systems enhances security but doesn't enforce device trust or session-based policies. Zero Trust principles guide access control and evaluation of requests. OAuth scopes in OAuth are often coarse-grained, limiting fine-grained access control. GitHub MCP server demo illustrates challenges with coarse-grained scopes. Centralized logs provide auditing for better tracking and control. MCP servers with Pumarium simplify OAuth implementation. Identity-aware proxy manages OAuth flow and policy enforcement. Demo shows secure data handling through an MCP server with auditing. MCP client simplifies OAuth token management. Demo showcases successful repo operations with real-time auditing. Successful operations except merge pull request. Resources, MCP spec docs, Zero Trust Security insights, and contact information.