MCP: Gateways, Shadow Servers, and Discovery
MCP is how agents find and call tools. The hard part is not the protocol. It is knowing which servers exist, what they can do, and who they act for. These posts …
Read more →$
whoami --verbose
● always shipping
|
Portland, OR
|
agentic mesh · agent runtimes · ai gateways
MIKE MOORE
building the agentic future in public
I run LLMs, robots, and gateways into production walls so you don't have to. Deep dives on the agentic mesh, agent runtimes, AI gateways, and the Kubernetes substrate that keeps autonomous systems honest — every post ships with a repo you can clone and receipts you can check.
Start here
Agent Identity
How an agent proves who it is: SPIFFE, token exchange, and audience binding.
Open the hub →Agent Security
Controls that look like controls and are not, and what to put in their place.
Open the hub →AI Gateways
The call path between agents and models: identity, spend, and policy in one place.
Open the hub →MCP
How agents find tools, which servers exist, and who those tools act for.
Open the hub →Agent Runtimes
Start, stop, and isolate agents on Kubernetes. kagent and the substrate under it.
Open the hub →Robotics
The house as a cluster, the cost of a capable machine, and who signs the test report.
Open the hub →The Latest Drops
OpenAI Red-Teamed Its Sandboxes and Found a CPU Side Channel
OpenAI spent hundreds of billions of tokens trying to break its own agent sandboxes, and its agents won often enough to patch a Kata Containers CVE, a gVisor …
Read more →Robotics: The House, the Cost, and the Test Report
Robots are computers that can reach you. I write about the house as a cluster, the cost of a capable machine, and the same identity and audit questions that …
Read more →Human Attention Is the Spec
Every system I’ve ever run had a bottleneck. Find it, and you know what to fix. Ignore it, and you spend money speeding up things that were never the …
Read more →Grok Bot on agentgateway codeSearch: 96% Fewer Tokens on Real GitHub Work
I run most of my day through Grok Bot. It reads my GitHub, my mail, my calendar, my notes, and it chains those calls all day long. Every one of those MCP calls …
Read more →OpenAI's Patch the Planet: What Safeguards Agent Scanning Needs
OpenAI’s “Patch the Planet” initiative spent two months coordinating a fix for two critical PHP flaws, collectively called PHP2Shell, before …
Read more →Who Signs the Test Report for a Robot?
Every product I ever tested ended in the same place: a test report with a signature on it. The signature mattered more than the data. It said someone qualified …
Read more →Changeover Time Is the Spec Nobody Quotes
Every robot spec sheet quotes speed, payload and accuracy. Almost none quote the number that decides how much a station actually makes: how long it takes to …
Read more →Hardware Is AI's Teeth: Robots Are Building the AI Buildout
“If AI is going to eat the world, hardware will be its teeth.” Haomiao Huang, a founding partner at Matter Venture Partners, said that when the firm …
Read more →include_content=False Didn't Stop pydantic-ai's MCP Token Leak
pydantic-ai shipped two security fixes on 2026-10-19. The one I reproduced, GHSA-xv4x-g8mx-ch56 , is a two-flag problem: include_content=False does exactly what …
Read more →