#MCP
10 total
Codex CLI 0.155, Explained: Experimental /voice, Touch ID for MCP Requests, and the 0.155.1 Revert
Codex CLI 0.155.0/0.155.1 back to back: experimental /voice behind /experimental, streaming reasoning summaries, Touch ID for MCP requests, daemon update schedules, Bedrock credentials — plus the 0.155.1 reasoning-summary revert.
Read articleMCP Apps Explained: Interactive UIs Rendered Inside Chat, Standardized as SEP-1865
MCP Apps (SEP-1865, Final): a server declares a ui:// resource, and hosts like Claude or VS Code Copilot render the interactive HTML inside the conversation. Mechanism, security model, SDK code, and host support.
Read articleThe Model Hardware Standard, explained: how MHS lets AI agents safely operate physical devices
A close reading of Anthropic's August 27 research preview of the Model Hardware Standard: standardized drivers, three control mechanisms including MCP, results from six research partners, and eight vendors building support.
Read articleMCP Client Features Today: Elicitation Stays, Roots and Sampling Deprecated (SEP-2577)
The 2026-07-28 spec reshuffled MCP client features: Roots and Sampling deprecated (SEP-2577, retained 12+ months) while Elicitation remains with a new URL mode -- status, deprecation context, and migration paths, clause by clause.
Read articleMCP stdio Transport Deep Dive: Message Framing, Process Lifecycle, and Backward Compatibility (2026-07-28 Spec)
The MCP stdio transport at spec level: newline-delimited JSON-RPC framing, the stdout/stderr boundary, cancellation and shutdown lifecycle rules, crash restarts, and backward-compatibility probing.
Read articleMCP Authorization Explained: How OAuth 2.1 Lands in MCP (2026-07-28 Spec)
The MCP authorization spec clause by clause: role mapping, RFC9728 discovery, three registration mechanisms, the iss validation table, resource parameters, token red lines, and the step-up authorization flow.
Read articleDebugging MCP in Practice: Inspector, Logging Rules, and the Connection Troubleshooting Chain
The official method for debugging MCP integrations: the Inspector UI as first stop, stdio vs Streamable HTTP logging rules (notifications/message deprecated in spec 2026-07-28), startup root causes, and a five-step connection chain.
Read articleMCP Security Guide: The 8 Official Attack Vectors and Their Mitigations
The official MCP security best practices, decoded: eight attack classes from Confused Deputy and Token Passthrough to SSRF and scope minimization, each with the official mitigation requirements.
Read articleMCP server development: protocol, debugging, security, and production deployment
MCP server production essentials: protocol deep-dive (JSON-RPC 2.0 / lifecycle / capabilities negotiation), Inspector debugging, transport selection (stdio / Streamable HTTP / SSE), security modes (prompt injection / OAuth scope / audit).
Read articleDeploy MCP Server to Cloudflare Workers: MCP at the Edge
Deploy MCP Server to Cloudflare Workers: stdio to Streamable HTTP conversion, Edge Runtime limits, KV persistence, wrangler config, and a production checklist.
Read article