Deep-dive guides on AI agents, agent orchestration, MCP, and developer tooling.
2 posts found
MCP started as a trusted local subprocess with no auth story at all. Its authorization spec bolts on OAuth 2.1, PKCE, and resource indicators — here is what each piece actually prevents, including the token-passthrough bug that keeps showing up in early implementations.
A wire-level look at the Model Context Protocol — capability negotiation, tool discovery, transport tradeoffs, and the context-budget mistakes that quietly degrade agent reliability.