MCP: Gateways, Shadow Servers, and Discovery
MCP is how agents find and call tools. The hard part is not the protocol. It is knowing which servers exist, what they can do, and who they act for. These posts …
Read more →#MCP
43 posts
Grok Bot on agentgateway codeSearch: 96% Fewer Tokens on Real GitHub Work
I run most of my day through Grok Bot. It reads my GitHub, my mail, my calendar, my notes, and it chains those calls all day long. Every one of those MCP calls …
Read more →include_content=False Didn't Stop pydantic-ai's MCP Token Leak
pydantic-ai shipped two security fixes on 2026-10-19. The one I reproduced, GHSA-xv4x-g8mx-ch56 , is a two-flag problem: include_content=False does exactly what …
Read more →Portkey Alternative: agentgateway, Self-Hosted
agentgateway is an open source gateway you run yourself, and it covers the jobs most teams use Portkey for: virtual keys that hide the provider key, per-key …
Read more →What Is an MCP Gateway? agentgateway Examples
An MCP gateway is a proxy between AI clients and MCP servers, so agents reach many tool servers through one endpoint and every tool list and tool call passes …
Read more →Stopping Agent Proxy Laundering at the MCP Gateway
On 2026-10-05 the Wikimedia Foundation disclosed that a handful of wiki edits it attributes to OpenAI-operated agents changed the configuration of a citation …
Read more →Two Grok Bots Leaked a CEO's Bank Balance to Slack
Two “separate” Grok Bots leaked a CEO’s bank balance into a public Slack channel on October 19. Nobody jailbroke anything. Nobody injected a …
Read more →AI Meeting Note Takers That Work With Claude
Granola, Otter, Fireflies, Fathom, tl;dv and Read AI all have official MCP servers that connect to Claude, as of October 2026. The real differences are which …
Read more →How to Connect Granola to Claude
To connect Granola to Claude, open Claude’s settings, go to Connectors, search for Granola, click Connect, and sign in with your Granola account. Claude …
Read more →Find Shadow MCP Servers in Your Environment
Find shadow MCP servers by checking the places they hide: the network and your clusters, where an MCP server answers a server/discover or initialize request; …
Read more →MCP Tool-Call Guardrails: Gating Agents Before the Tool Runs
agentgateway can now reject or rewrite an MCP tools/call request before the tool runs, and mask the result before the client sees it, from CEL expressions in …
Read more →Plaud vs Otter: Which AI Note Taker Is Right for You? (2026)
Heads up: some links here are affiliate links. If you buy through them I may earn a commission, at no extra cost to you. It doesn’t change what I …
Read more →The Path-Validation Bug That Let Copilot Register a Rogue MCP Server
CVE-2026-103572 , disclosed by embracethered.com and patched by Microsoft on 2026-10-13, is a Remote Code Execution bug in Visual Studio and SSMS Copilot, CVSS …
Read more →MCP Audit Tap: See What a Third-Party Server Actually Sends
A Show HN post for a “WhatsApp MCP server running free on Cloudflare” hit 124 points and 69 comments in under 16 hours on October 19, and none of …
Read more →agentgateway vs Agent Router v1.2: MCP prefixMode Defaults
Agent Router v1.2.0 added prefixMode: Never for MCP tool names on October 7, 2026, a control agentgateway already ships with three values: Conditional, Always, …
Read more →MCP Progressive Tool Discovery: Native vs. Hand-Rolled
The 2026-08-22 MCP roadmap names progressive tool discovery as a priority, in almost these words: a server should offer a small entry point and reveal more of …
Read more →agentgateway Standalone: Guardrails, Budgets, Tool Governance
themsquared/agentgateway-standalone-demo runs Solo Enterprise for agentgateway as a single docker compose up, no Kubernetes cluster and no cloud provider …
Read more →What Is Shadow MCP? A Plain Definition
Shadow MCP is any MCP server your AI tools can reach that your security or platform team doesn’t know about, didn’t approve, and can’t see. …
Read more →Stopping a Filesystem MCP Server From Reading .env Files
Disclosure: I work at Solo.io, which created agentgateway and sells Solo Enterprise for agentgateway. The demos I cite are public repositories. A filesystem MCP …
Read more →What Is an AI Agent Gateway?
An AI agent gateway is a reverse proxy between your agents and everything they call: language models, MCP tools, other agents over A2A, and ordinary HTTP or …
Read more →A Private MCP Registry in 10 Minutes with agentregistry
A private MCP registry is a catalogue of approved MCP servers that your clients discover from instead of the open public one. I built private-mcp-registry to …
Read more →agentgateway Token Exchange for AI Agents
An AI agent that calls tools for a user needs that user’s authority, and the usual shortcuts are a pasted personal access token or a shared service …
Read more →MCP Cross App Access Explained: The ID-JAG Exchange on the Wire
MCP’s Enterprise-Managed Authorization lets the corporate IdP decide which employees can use which MCP servers, by making the client trade an IdP-signed …
Read more →Agent Platform Gateway Control Plane
A production agent platform needs one gateway path where SPIFFE identity binds the caller and four controls ride the same hop: secretless provider keys, per-key …
Read more →Do AI Agents Need SPIFFE or OAuth?
They answer different questions. SPIFFE proves which process is calling, without a provisioned secret. OAuth scopes what it may do and, when a human is in the …
Read more →Stateless MCP on Kubernetes: No More Sticky Sessions
Three replicas of an MCP server, fronted by agentgateway , with no session affinity configured anywhere. A four-call shopping cart session (create cart, add two …
Read more →AI Agent Security on Kubernetes: Which Controls Actually Held
I spent the last month building small, runnable labs for the ways AI agents break the infrastructure they run on: credentials, egress, audit logs, MCP tool …
Read more →Choose an AI Agent Gateway: agentgateway Guide
Choose by the controls in the request path, not by model-catalog size. Write down what you must enforce on agent to model and agent to tool traffic: workload …
Read more →Building Workload Identity Federation for AI Agents on Kubernetes
The easy way to give an agent pod access to an external API is a long-lived key in a Kubernetes Secret. The harder, better shape is the one I used in SPIFFE for …
Read more →What Is an Agentic Mesh (vs a Service Mesh)?
An agentic mesh is infrastructure that applies identity, policy, and observability to agent traffic (calls to models, tools, and other agents) so those controls …
Read more →agentgateway vs LiteLLM vs Portkey, Compared
Disclosure: I work at Solo.io, which created agentgateway and sells Solo Enterprise for agentgateway. Every product claim below links to that project’s …
Read more →Your Artifact Registry Is a Two-Way Channel for Agents
Egress control for AI agents usually gets framed as a blocklist problem. Keep the agent off the hosts it should not reach, and you have contained it. This …
Read more →MCP Tool Poisoning: A Name Allowlist Is Not Enough
I built a four-container demo that reproduces an MCP server rewriting its own tool definitions mid-session, and puts two controls in front of it to see which …
Read more →A WAF That Reads the Prompt: OWASP CRS for LLM and MCP
A conventional web application firewall reads a URL, some headers, and maybe a form body. For agent traffic that is the wrong layer. The interesting content is …
Read more →Agent Identity on Kubernetes: The Complete Series
An AI agent that calls a model, a tool, or another agent has to prove who it is. Almost every production failure I have written up this month traces back to …
Read more →Securing AI Agents in Production: The Complete Series
Almost everything in this series started the same way: a control that everybody agrees is the right control, applied to an agent, quietly not doing the thing …
Read more →Shadow MCP Servers: Track, Find and Stop Them Across Teams
Shadow MCP servers are hard to track across teams because most run as local child processes of an IDE or agent over stdio, with no network presence, and their …
Read more →Conway's Law Is Coming for Your MCP Servers
I have some version of this conversation just about every week. A platform team is rolling out MCP across the company, and the plan looks the same every time: …
Read more →Keeping MCP Server Instructions Out of Your Agent's System Prompt
How do you keep MCP server instructions out of the trusted system prompt? Isolate them, cap them, bind any cache that stores them to server and caller, and pin …
Read more →kagent Audience-Bound Tokens (RFC 8707)
kagent v0.10.0 went GA on September 4 . Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works …
Read more →MCP Agent Identity: What Shipped, What to Use
The Model Context Protocol roadmap published on August 22 names agent identity and enterprise-ready security as a priority workstream, with four specific …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →Multi-Tenant MCP Servers: Per-Customer Tools
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →