Articles for people who
ship the stack
Rewrites on React, Node.js, TypeScript and AI. A translated body is shown when it exists. If it does not, you see the English text and a note that says so.
Tagged: OAuth
Deploying an MCP Server on EC2 After the Stateless Spec Change
Moving an MCP server from localhost to EC2: streamable HTTP, nginx and bearer auth, then what stateless sessions and OAuth 2.1 mean for a real deployment.
11 min readStateless MCP in the 2026-07-28 Spec: What Changes for Agent Infrastructure
The new MCP revision drops sessions, adds routing headers, input_required round trips and tighter OAuth. What that means for gateways, scaling and security.
8 min readMCP in Plain Language: A Shared Door Between AI Assistants and Software
MCP in plain language: how the Model Context Protocol links AI assistants to software, what read, write and create access means, and why adoption took off.
7 min readA Dual OAuth Boundary for MCP Gateways: Keeping the User's Identity
MCP gateways shouldn't squash every call into one service account. Inbound validation plus an on-behalf-of OAuth exchange keeps each user's identity intact.
11 min readConnect an Oracle Integration Cloud MCP Server to Codex on macOS
Set up OAuth client credentials, fetch an access token, register an OIC project's MCP server in Codex and confirm its tools show up in the CLI and desktop app.
8 min readEnterprise MCP on Bedrock AgentCore with Okta SSO and Trino
Lambda OAuth brain, PKCE relay, AgentCore gateway and runtime, and per-user Trino connections without leaking shared tokens.
13 min readSecure MCP: when an AI agent gets keys to your systems
Treat Model Context Protocol tools as capabilities, not endpoints—separate authn from authz, fix confused deputies, minimize tool output, and assume the model is powerful and untrusted.
12 min readMapping the Auth Vocabulary: API Keys, Sessions, JWT, OAuth2, OIDC, SSO
Learn how API keys, sessions, JWTs, OAuth2, OpenID Connect and SSO fit together by sorting each one under a single question: who is calling, or what may they do.
10 min readSix Integration Patterns for Connecting Node.js Services Reliably
Learn the core patterns behind robust Node.js integrations: request-response, polling, webhooks, API key, JWT and OAuth auth, retries with backoff, and data mapping.
7 min read
About these articles
Request a 24h estimate
Need the same stack in a production operator layer? Send the brief — estimate within 24 hours.