Blog

Deep-dive guides on AI agents, agent orchestration, MCP, and developer tooling.

5 posts found

MCP

MCP Resources: The Primitive Almost No Server Implements

MCP defines three primitives (tools, resources, and prompts), but nearly every server in the wild only implements the first. Here's what resources actually do, why client support lagged, and where skipping them leaves your agent acting on stale context.

October 12, 2026 · 9 min read
MCP

MCP Elicitation: Form Mode, URL Mode, and the Phishing Attack Built Into Its Design

MCP's elicitation feature lets a server pause a tool call to ask the human for more input. The protocol splits it into two modes with very different trust models, one of which exists specifically to stop an account-takeover attack.

October 3, 2026 · 11 min read
MCP

MCP Sampling: How a Server Asks the Client's Model to Think for It

Sampling is the MCP primitive that inverts the relationship, letting a server without its own model borrow the client's LLM through a two-gate approval flow. Here is how it works, and why the 2026-07-28 spec revision deprecated it.

September 11, 2026 · 9 min read
MCP

MCP Authorization: How OAuth 2.1 Actually Secures a Remote MCP Server

MCP started as a trusted local subprocess with no auth story at all. Its authorization spec bolts on OAuth 2.1, PKCE, and resource indicators; here is what each piece actually prevents, including the token-passthrough bug that keeps showing up in early implementations.

August 5, 2026 · 9 min read
MCP

What Actually Happens Inside an MCP Tool Call

A wire-level look at the Model Context Protocol: capability negotiation, tool discovery, transport tradeoffs, and the context-budget mistakes that quietly degrade agent reliability.

June 29, 2026 · 8 min read

New posts by email

One email when a new post goes up. No other mail; unsubscribe in one click.

We store your email only to send new posts. See the privacy policy.