74 posts tagged with "Model Context Protocol"
Content about the Model Context Protocol (MCP)
What a Zanzibar-Style Relationship Graph Buys a Deploy MCP Server Over a Scoped API Key
AuthZed is pitching SpiceDB's relationship-graph authorization for AI agents. Here's the actual SpiceDB schema for a deploy/rollback MCP server, what it can check that a scoped API key can't, and whether running it is worth the operational cost.
Friendly Fire: The AI Security Review That Executes the Attack It's Supposed to Catch
AI Now Institute's Friendly Fire exploit turns Claude Code and Codex's own security reviews into remote code execution — here's how it works and what it means for scoping AI agent permissions on a deploy pipeline.
GitHub Copilot's Worktree Isolation Is Not a Sandbox — Why That Matters for Deploy-Authority Agents
GitHub's Copilot app isolates parallel agent sessions with git worktrees, not sandboxes — fine for code edits, but not enough for an MCP server that can deploy and rollback real infrastructure. Here's the concrete difference and what it means for agent-operated PaaS platforms.
Pinterest Ran 66,000 MCP Tool Calls a Month — Here's the Gate Your Deploy Agent Needs
Pinterest's production MCP fleet handled 66,000 tool calls a month across 844 users. Here's the registry-and-gate architecture behind those numbers, and the concrete rate-limit and audit-retention policy a deploy-from-chat PaaS should ship on day one.
Your Deploy Agent's MCP Server Is a Trust Boundary — Here's the Threat Model
A malicious MCP server already backdoored a mail pipeline in the wild. Here's the threat model for what happens when the same protocol holds your deploy and rollback credentials — and the scoping, gating, and logging practices that actually bound the damage.
Cursor and Windsurf Can Now Run Your Code in the Cloud. Neither One Can Ship It.
Cursor's Cloud Agents and Windsurf's Devin handoff both run your code in a sandboxed cloud VM and hand back a PR. Here's the documented, vendor-confirmed line where that stops and deploying starts — and what actually closes it.
AWS Open-Sourced the Exact MCP Governance Layer Snowflake Just Paid to Acquire
Snowflake just paid an undisclosed sum to acquire Natoma's MCP governance gateway. AWS's Apache-2.0 mcp-gateway-registry already does the same identity, policy, and audit job — self-hosted on EKS, ECS, or a single Docker Compose file.
LiteLLM's Agent Platform Fixes Session Amnesia With One Postgres Table, Not a New Kubernetes Primitive
BerriAI's alpha-stage LiteLLM Agent Platform keeps an AI agent's session alive through a pod restart by storing state in Postgres instead of the sandbox itself — here's the actual mechanism, how it stacks up against E2B, Daytona, and Modal, and what it means for any MCP server with real deploy authority.
Manufact Raised $6.3M to Be 'Vercel for MCP Servers' — Here's Exactly What a Generic Git-Push PaaS Doesn't Give You
Manufact raised $6.3M to build a hosted cloud purpose-built for MCP servers. Here's the actual pricing, the actual feature list, and what deploying the same MCP server on a generic git-push PaaS gets you instead.