- The 401 is the map: three OAuth primitives in my private MCP servers
MCP OAuth 2.1 explained by walking one real client connection through a production server: discovery metadata, dynamic client registration, and the PKCE grant.
Jul 16, 2026 · 11 min
- Tools vs Resources vs Prompts: the MCP primitive you're misusing
MCP primitives (Tools, Resources, Prompts) are not interchangeable. The misuse that bites: shipping read-only data as a Tool the model must choose to call.
Jul 13, 2026 · 14 min
- MCP transports, decided
MCP transport choice, decided: stdio for local, Streamable HTTP for remote, SSE deprecated. The ten-second rule plus the stdout gotcha that costs you an afternoon.
Jul 1, 2026 · 9 min
- No, MCP servers aren't dead (and here's the 2007 reason why)
MCP isn't dead. The 'MCP is dead' wave measures the wrong axis: update friction. MCPs auto-fetch the maintainer's latest; skills default to download-and-own.
Jun 1, 2026 · 14 min