Plural x Kubernetes April Meetup, with guest speaker Michael Levan (Topic: Plugging Security Holes in LLMs and MCP Servers)

Our guest speaker is Michael Levan, AI Architect at Solo.io and CNCF Ambassador. His topic is "Plugging Security Holes in LLMs and MCP Servers." Bring your questions :)

--

Session Abstract: In the past year, two major conversation points have emerged in customer calls around AI:

1. Securing Agentic infrastructure, MCP Server connectivity (for both users and Agents), and ensuring a proper AI Gateway exists to secure/observe traffic.

2. Access Control and OAuth for connecting to MCP Servers and LLMs.

With both stdio (like libraries/modules) and streamable http (an MCP Server sitting in someones environment), organizations need to ask themselves how they're implementing auth at the system and user level to access these MCP servers (and from the Agents), what tools are exposed from the MCP Servers, and how the tunnel (from user/agent to MCP Server) is observed and secured.

When organizations are implementing LLM providers, the same thought comes into mind - who can use these LLMs and what are they able to do with the access?

We will discuss how to plug security holes by understanding the current standards (stdio and streamable http), authentication at both the system and user level (jwt, oAuth, and OIDC), where an AI gateway can help secure traffic throughout the tunnel, and how to specify what tools should be exposed from MCP Servers with traffic policies.

--

Schedule:

6:00pm - door opens

6:30pm - intros (please arrive by this time!)

6:40pm - speaker programming

7:20pm - networking 

8:00pm - event ends

We will have food and drinks during this event. Please arrive no later than 6:30pm so we can get started promptly. Invites are non-transferable.

--

About the host: Plural manages the entire software development lifecycle for Kubernetes and and delivers AI-native Kubernetes management at enterprise scale. Bring AI into day-2 operations, automate complex upgrades, and manage Kubernetes fleets across any cloud, data center, or edge all fully under your control. Learn more at https://www.plural.sh/