MCP TypeScript SDK OAuth flaw: credentials followed the wrong issuer
A high-severity MCP TypeScript SDK flaw let the server choose which authorization server got client secrets. Patch, bind and rotate.
Blog tag
#MCP
The Model Context Protocol: servers, clients, tools and the ecosystem around them.
MCP servers keep trusting the wrong URLs: what recent advisories show
Advisories from Splunk, AWS, Google and the Rust MCP SDK share one pattern: a tool builds a request or command from input it shouldn't trust.
Set up the MCP gateway and choose your first connectors
Give every computer's AI tools one governed MCP server: add two or three connectors read-only, set permissions and approvals, and check it works.
5 min read
The stateless MCP specification: what changes for teams running MCP servers
MCP 2026-07-28 drops sessions, adds routing headers, hardens authorisation and deprecates features. What platform and security teams need to plan for.
5 min read
Browse by tag
- #Security (54)
- #Agents (40)
- #AI coding tools (37)
- #LLM costs (23)
- #MCP (16)
- #Evaluation (14)
- #Observability (12)
- #Compliance (11)
- #Enterprise (9)
- #Platform engineering (9)
- #Data privacy (8)
- #DevOps (7)
- #Model routing (7)
- #Open-weight models (7)
- #Research (7)
- #Tutorials (6)
- #Code review (4)
- #Developer productivity (4)
- #Guardrails (4)
- #Networking (4)
- #OpenTelemetry (4)
- #Budgets (3)
- #Prompt engineering (3)
- #Self-hosting (3)
- #MCP gateway (2)
- #Release notes (2)
- #Skills (1)
- #Testing (1)