Blog

Writing on MCP authentication, OAuth 2.1, and building secure MCP servers.

Why an OAuth proxy in front of MCP is the wrong fix

Developers are hand-rolling OAuth proxies in front of MCP servers to fake Dynamic Client Registration — here's why that's fragile.