Topic archive
#Agent Security
2 articles tagged with this topic.
Jul 9, 202615 min read
MCP Authentication for Remote Servers in 2026
A practical guide to securing remote MCP servers with OAuth 2.1-style discovery, PKCE, resource-bound tokens, token validation, and production-safe scopes. Includes a checklist, runnable Express middleware, and the failure modes developers usually miss.
AI AgentsDeveloper Tools
May 6, 202610 min read
Your AI Coding Agent Needs a Permission Contract, Not Just a Prompt
A practical guide to writing CLAUDE.md as a permission contract for AI coding agents, covering tool tiers, hard stops, failure behavior, and MCP server security.
Developer Tools