How I Use the Pocket AI Recorder for Meetings, Ideas, and Life
For about six weeks I’ve had a Pocket recorder stuck to the back of my phone, and it has quietly become the thing I reach for most after the phone itself. …
Read more →#MCP
10 posts
Agent Identity on Kubernetes: The Complete Series
An AI agent that calls a model, a tool, or another agent has to prove who it is. Almost every production failure I have written up this month traces back to …
Read more →Finding the MCP Servers Your Platform Team Doesn't Know About
An MCP server is a small HTTP service. Anyone on your team can start one in an afternoon, and the useful ones get built precisely because they reach something …
Read more →Securing AI Agents in Production: The Complete Series
Almost everything in this series started the same way: a control that everybody agrees is the right control, applied to an agent, quietly not doing the thing …
Read more →Conway's Law Is Coming for Your MCP Servers
I have some version of this conversation just about every week. A platform team is rolling out MCP across the company, and the plan looks the same every time: …
Read more →MCP Prompt Injection Before the First Tool Call
I built a red-team lab for the part of MCP that runs before any tool call: the instructions field a server returns from initialize and server/discover. Four …
Read more →kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default
kagent v0.10.0 went GA on September 4 . Buried in a long release list is a pair of environment variables that decide whether an agent’s credential works …
Read more →MCP Agent Identity: One Spec Shipped, Three Still Open
The Model Context Protocol roadmap published on August 22 names agent identity and enterprise-ready security as a priority workstream, with four specific …
Read more →Your AGENTS.md Is Not a Security Control
An agent with a policy file that says “you must not delete customer records”, running behind an approval layer that denylists the delete tool, …
Read more →Multi-Tenant MCP Federation with agentgateway
Three companies authenticate against three different identity providers, connect to the same three MCP URLs, and get three completely different products. Acme …
Read more →