# Authenticate every transport through one layer

> A single AuthMiddleware on the parent app now covers REST, /mcp, and WebSocket transports, so auth no longer drifts from one transport to the next.

- Published: 2026-07-07
- Author: Agno Team
- Category: Changelog
- Canonical: https://agno-com-nine.vercel.app/articles/authenticate-every-transport-through-one-layer
- Markdown: https://agno-com-nine.vercel.app/articles/authenticate-every-transport-through-one-layer.md

A single `AuthMiddleware` on the parent app now covers REST, `/mcp`, and WebSocket transports, so auth no longer drifts from one transport to the next. `JWTMiddleware` stays as a backward-compatible alias, so existing setups keep working while every entry point enforces the same rules.

View the [AgentOS AuthMiddleware docs](https://docs.agno.com/reference/agent-os/jwt-middleware#authmiddleware) to learn more.