Okta MCP Server Ships Elicitation API: AI Agents Must Request Human Confirmation Before Destructive Actions

Okta Developer Blog·medium signal

Okta's MCP server v2026.03.0 integrates the MCP Elicitation API, requiring human confirmation before agents execute destructive operations like deleting apps or deactivating users. This is the first major enterprise identity provider to ship human-in-the-loop guardrails at the MCP protocol layer rather than application layer. Sets a pattern for how enterprise tool vendors will gate agentic access to sensitive operations.