74 posts tagged with "Model Context Protocol"
Content about the Model Context Protocol (MCP)
Your MCP Server Doesn't Know Who's Deploying. WorkOS's OAuth 2.1 Stack Fixes That
Most MCP servers still trust a bearer token in an env var. WorkOS's May 2026 OAuth 2.1 stack — CIMD, Resource Indicators, and on-behalf-of token exchange — finally answers the question a deploy-authority MCP server can't skip: which agent, acting for whom, just asked to ship to production?
Canine's MCP Server Can Deploy — Coolify's Still Can't: A Tool-by-Tool Audit
Canine's built-in MCP server ships one write tool — DeployProject — where Coolify's stays fully read-only. Here's the exact tool list across Canine, Coolify, and Dokploy, and what Canine's Kubernetes-native architecture actually buys over each.
Pulumi Neo Is GA and Reads Your Terraform State Directly — Here's Why bex's Deploy API Won't
Pulumi Neo reads live Terraform and CloudFormation state directly and executes changes inside it. bex's MCP server calls a fixed, enumerable set of verbs instead. Here's the concrete case for why an agent that can create and destroy production infrastructure needs to know which shape it's actually operating under.
10,000 MCP Servers Later, the Hard Part Isn't Building One — It's Being Found and Trusted
MCP passed 10,000 public servers and 97 million monthly downloads in 2026 — but 52% of those servers are abandoned. Here's what building bex's own MCP server into that ecosystem actually requires: the protocol's stateless rewrite, the tool-poisoning threat class, and why shipping one isn't a differentiator anymore.
AWS Built a Five-Step AI Agent Just to Pick a Service
AWS's deploy-on-aws plugin takes five steps and three MCP servers to deploy an app because it's solving a 200-service menu problem. Here's what happens to that step count on a platform that never had the menu — and the one step that stays hard everywhere.
Backstage Ships MCP Tokens for Claude and Cursor: What Exposing a Golden-Path IDP to AI Agents Actually Requires
Backstage 1.43 lets Claude and Cursor call your golden-path Scaffolder actions with a short-lived, per-user token instead of a shared secret. Here's the actual config, the failure mode an unscoped action list creates, and what a self-hosted PaaS's own MCP server needs to copy.
Better-PaaS Ships Scoped Agent Tokens for Cursor and Claude Code — What an AGPL Self-Hosted PaaS Choosing Managed Databases Over bex's Non-Goal Reveals
Better-PaaS, a single-maintainer AGPL project, ships three-tier scoped agent tokens and seven MCP tools for Cursor and Claude Code — a concrete look at what that buys against bex's own coarser key model, and where Better-PaaS's bundled managed databases trade convenience for the high-availability story a single VPS can't back.
The NSA Just Published a Threat Model for MCP: What It Means for Your Deploy Agent
The NSA's AI Security Center named four structural risks in MCP's design — and every one already has a real 2026 incident behind it. Here's what each means concretely for a self-hosted MCP server with deploy and rollback authority.
Railway's New MCP Server Has 7 Tools. bex's Shipped One Has 13 — and Still Can't Deploy
Railway's remote MCP server ships 7 tools and a one-line agent install; bex's already-shipped MCP server exposes 13. Here's what each actually lets an agent do unattended, and the one deploy verb bex still owes its own roadmap.