Nate Barbettini
Founding Engineer at Arcade.dev
Actions
Nate Barbettini is a founding engineer at Arcade.dev, building the MCP runtime for secure, multi-user AI agents. Previously, he was co-founder and CTO of Cobbler, where he built production AI systems for finance teams. A longtime educator in authentication and security, Nate actively contributes to MCP and AI security projects. He lives in the Bay Area with his wife and two curious kids.
Links
OAuth and OpenID Connect in plain English
If you're like me, you've heard about OAuth 2.0 and OpenID Connect, but have a lot of unanswered questions. What's the big deal, anyway? Why do we need yet another set of standards for authentication on the web?
In this talk, I'll break down the rationale behind OAuth and OpenID Connect in plain language, and explain when and how you should use these standards in your applications. I'll cover grant types, flows, scopes, tokens, and more. If you've ever felt confused about how these standards work, this talk is for you!
URL Elicitation deep dive: Third-party OAuth solved (and more!)
The Nov 2025 release of MCP introduced a new client capability: URL Elicitation. This capability is game-changing for MCP servers that interact with external systems. But don't just take our word for it... Hear it straight from the author of the spec!
In this talk, Nate (lead author of URL Elicitation) will break down the "what" and "why" of this new addition to the protocol. You'll learn about:
- Why it's a mistake to reuse or "pass through" OAuth tokens from one server to another
- The confused deputy problem and other common pitfalls to watch out for
- How URL Elicitation unlocks a secure way for MCP servers to call external services that use OAuth or API keys, require payments, or gather sensitive information
- The correct security patterns for any remote MCP server project today
No need to be a security expert to attend! Nate will break down the problems and solutions in clear, relatable language, and provide crucial guidance for anyone building MCP servers in 2026 and beyond.
MCP Dev Summit North America 2026 Sessionize Event Upcoming
KCDC 2018 Sessionize Event
Seattle Code Camp - 2017 Sessionize Event
Please note that Sessionize is not responsible for the accuracy or validity of the data provided by speakers. If you suspect this profile to be fake or spam, please let us know.
Jump to top