AI agents and MCP
What it takes to let an agent deploy and operate real infrastructure: MCP servers that do more than read, confirmation gates on destructive calls, and knowing which human authorized the deploy.
Start here
- MCP Just Passed 22,000 Servers. Almost None of Them Can Deploy Anything.MCP has 22,000+ servers and 97M monthly downloads, but almost all of them are read-only lookups. Here's what idempotent deploys, rollback, and audit logging actually require from the ones that aren't.
- MCP's Stateless Core Just Shipped: What a Deploy-From-Chat MCP Server Gets to DeleteMCP dropped protocol-level sessions on July 28, 2026 — deleting the sticky routing and shared session store a self-hosted deploy/rollback MCP server used to need, and adding a formal lifecycle policy worth pinning to.
- Your MCP Server Doesn't Know Who's Deploying. WorkOS's OAuth 2.1 Stack Fixes ThatMost MCP servers still trust a bearer token in an env var. WorkOS's May 2026 OAuth 2.1 stack — CIMD, Resource Indicators, and on-behalf-of token exchange — finally answers the question a deploy-authority MCP server can't skip: which agent, acting for whom, just asked to ship to production?
- Vercel Shipped an Official MCP Server. Here's Every Tool It Refuses to Give Your AgentVercel's official MCP server took a year to gain its first write tool — and it still can't touch an existing project's env vars, domains, or a rollback. A tool-by-tool audit of the agent-ops bar the market leader actually set.
- Your MCP Server Lost Its Confirmation Prompt on July 28: Rebuilding the Delete Gate on input_requiredThe 2026-07-28 MCP spec deleted server-initiated requests, and with them the only way a destructive tool could stop and ask a human. Here is the replacement on the wire: a delete_service gate built on resultType input_required, the signed requestState ticket that survives a round-robin load balancer, and the once-only guarantee the protocol makes your problem.
- AWS DevOps Agent Goes GA But Still Can't Deploy the Fix: The Diagnose-Not-Act LineAWS DevOps Agent reached GA finding root causes in minutes — but it still refuses to execute the fix. Why every enterprise agentic-ops vendor stops at diagnosis, and the five pieces of platform machinery needed before an AI agent can safely deploy the rollback itself.
In the documentation
Terms to know
Give your agents a chain backend
Autonomous agents hit RPC endpoints very differently than people do. See what bex router handles on their behalf.
Read the agents guide