AI agents with coarse-grained OAuth scopes can perform far more actions than they actually need across your infrastructure, and this session demonstrates how fine-grained access policies transform those broad permissions into precise tool-level controls, implementing real Zero Trust architecture where agents get exactly the access they require and nothing more.
Watch on YouTube
AI agents are no longer speculative—they’re querying APIs, rewriting records, and chaining tools via protocols like MCP (Model Context Protocol). The latest MCP spec requires OAuth 2.1 and Resource Indicators (RFC 8707), strengthening identity security while leaving authorization up to the implementer. But OAuth alone can’t enforce what an agent does after login—or whether it should act at all.
Watch on YouTube
Nick Taylor, developer advocate at Pomerium, sat down with the All Things Open team to share how open source and AI can boost developer productivity. From tips on contributing to projects, using AI tools to streamline coding and content workflows, to stepping outside your comfort zone for growth, Nick highlights practical insights every developer can use to level up their skills and workflow.
👩‍🚀 All Things Open 2026 is happening October 18-20, 2026 | https://2026.allthingsopen.org/
0:08 - Welcome 0:16 - Brief introduction of yourself (30 seconds) 0:30 - You're passionate about open source. How did you get involved, what excites you about it, and why is it important to you? 1:25 - What's your advice to someone just getting started with open source? 2:08 - There's a lot of discussion about AI’s role in development. Do you think AI will replace developers? Why or why not? 3:12 - What's a new tool you’ve been using to boost your productivity? 4:18 - What's one tip, best practice, or any advice you’d like to share with the ATO community? 5:11 - How are you using AI to work with content and what's your experience?
About We Love Open Source
We Love Open Source is an open source community educational hub that includes blogs, interviews, presentations, podcasts, how-to's, and more, from the All Things Open community members:
About All Things Open All Things Open is a universe of open source events and platforms designed to educate and connect technologists around the world. It includes the All Things Open conference, the largest open source / tech / web event on the U.S. East Coast, meetups in the Research Triangle Park (RTP) of NC, South Carolina, and New York City, and a YouTube channel with more than 1,000 free recordings. See everything we do at https://allthingsopen.org.
Join our meetups:
Follow All Things Open:
![How to turn Open Source into a Job with Nick Taylor [Podcast #181]](https://img.youtube.com/vi/m7nkioXNiik/maxresdefault.jpg)
On this week's episode of the podcast, freeCodeCamp founder Quincy Larson interviews Nick Taylor. He's a software engineer from Montreal and a prolific open source contributor.
We talk about:
Support for this podcast comes from a grant from Wix Studio. Wix Studio provides developers tools to rapidly build websites with everything out-of-the-box, then extend, replace, and break boundaries with code. Learn more at https://wixstudio.com.
Support also comes from the 11,384 kind folks who support freeCodeCamp through a monthly donation. You can join these chill human beings and help our charity's mission by going to https://donate.freecodecamp.org
Watch on YouTube
AI agents are moving fast—and often without humans in the loop. So how do you make sure these autonomous tools only access what they should, when they should?
In this session, Nick Taylor of Pomerium dives into one of the most urgent challenges in AI system design: securing agentic access to APIs and data. While OAuth 2.1 handles authentication (with PKCE, dynamic client registration, and refresh token rotation), it doesn’t solve for authorization logic—especially in real time.
That’s where Zero Trust comes in.
You’ll learn how the Model Context Protocol (MCP) integrates with OAuth and Zero Trust architecture to:
Secure AI agents operating at machine speed Enforce per-request, context-aware authorization Combine identity + intent for dynamic access control Prevent over-permissioned API calls Close the security gaps OAuth alone can’t
đź’ˇ Includes a live demo showing an AI agent accessing protected APIs via MCP, with Zero Trust enforcement via Pomerium.
👉 Subscribe to our channel for more technical deep dives into LLM infrastructure, security protocols, and how MCP is shaping the future of autonomous AI systems.
Watch on YouTube
Sponsored by Temporal — What could you create if you had 30 minutes to plan and 4 hours to build? Adam Argyle, Lane Wagner, Sarah Shook, Nikki Meyers, Shashi Lo, and Nick Taylor took on the Web Dev Challenge to find out.
THE CHALLENGE Build a game that’s played on at least 2 devices.
Single player, multiplayer, cooperative, competitive, or something totally different — your challenge is to come up with something fun that is played across at least two devices. Temporal’s workflow tools will allow you to manage sending information between devices dependably.
Your game could be something like Jackbox, where a tv is the “game board” and each player’s phone is how they interact with it on their turn. You could make a game that uses phone APIs like the camera or gyroscope. Or you can implement a simple word game like the New York Times connection puzzles, but with the twist that it's designed to be solved collaboratively, and a session can persist beyond the players closing the web app.
THE TOOLS Your app must use Temporal (https://codetv.link/temporal) as part of the build. Temporal provides SDKs for Go, TypeScript, Python, .NET (C#), Java, and PHP, so you can use the language of your choice.
Temporal is a durable execution platform, which means you can orchestrate really complex logic across multiple services in a way that’s resilient, flexible, and — to use their words — invincible.
For this challenge, these resources might be especially useful:
If you want to see an example of a real-time game that was created using Temporal, take a look at the keynote demo from their 2024 Replay Conference: https://github.com/temporalio/replay2024-demo
THE DEVS Adam Argyle (@AdamArgyleInk) https://nerdy.dev Lane Wagner (@bootdotdev) https://www.boot.dev Sarah Shook https://shook.codes https://linkedin.com/in/sarahshook Nikki Meyer https://www.linkedin.com/in/nikki-meyer/ Shashi Lo (@codingwithshashi) https://www.linkedin.com/in/shashilo https://x.com/shashiwhocodes Nick Taylor (@nickytonline)
THE ADVISORS Alex Garnett https://www.linkedin.com/in/chicken-sandwich/ Jason Lengstorf (@codetv-dev) https://jason.energy/
Watch on YouTube
The Kubernetes Podcast From Google was Live from KubeConEU2025 in London.
We spoke to some guests and covered what happened on Day#3
Watch on YouTube
Joining up with my guy Nick this morning to talk about strategies to dive into large conferences and network efficiently!
Watch on YouTube
🚀 Join us for an exciting Open Source Friday featuring Nick Taylor, the creator of the copilot-extension-template!
Nick is a passionate advocate for Open Source, TypeScript, and serverless computing, with a knack for bringing teams together to achieve great things. In this session, Nick will walk us through the copilot-extension-template, a starter kit he designed to help developers build custom GitHub Copilot extensions. Built on Node.js using the Hono framework, this tool provides everything you need to extend Copilot’s capabilities, with instructions for local server setup, creating GitHub Apps, and testing in Copilot Chat, VS Code, and Visual Studio. Don’t miss this chance to learn from Nick and dive into the possibilities of extending GitHub Copilot. We’ll see you there!
Watch on YouTube
Sponsored by PartyKit. Click this link so they know you heard about 'em from me: https://lwj.dev/partykit
4 web devs had 4 hours to build a real-time, multiplayer web app that is NOT a chat or drawing app using PartyKit as part of the build. @nickytonline, Zeu, and @steveruizok joined and built absolutely incredible apps.
Technologies used include Astro, TypeScript, the Web Audio API, SvelteKit, Tailwind, JavaScript, plain CSS, and more!
➡️ MEET THE WEB DEVS:
Nick Taylor (@nickytonline)
Steve Ruiz (@steveruizok)
Zeu
Jason Lengstorf
Watch on YouTube
In a world where we see amazing things people do, we forget everyone faces tough times. It's easy to feel alone when we only see others doing great. But in these talks, inspiring tech people share their own tough moments and victories. They want you to know you're not the only one going through hard stuff.
Nick Taylor is a Senior Software Engineer at OpenSauced. He is a big fan of Open Source and has a growing interest in serverless and edge computing.
00:00 - What are Fireside Chats? 02:14 - Introductions 08:52 - Getting started with open source 41:02 - Goals for this year
Watch on YouTube