MCP
Model Context Protocol servers end to end: transports, auth flows, and the parts of the spec that bite in production.
2 essays
/012 minMCP
The MCP OAuth Flow, Drawn: The Broker Pattern in One Diagram (2026)
An MCP server fronting GitHub runs two OAuth relationships, not one, and the client never holds your GitHub or Google token. The broker pattern in a single diagram, plus the wiring underneath it.
/027 minMCP
MCP Server Authentication in FastMCP: The End-to-End Version (2026)
OAuth on an MCP server is two jobs, not one. Token verification is passive, remote OAuth is active, and picking wrong means Claude Desktop won't connect. The FastMCP wiring, end to end.
%20rotate(0)%20scale(1.6)%22%3E%3Ccircle%20cx%3D%220%22%20cy%3D%220%22%20r%3D%2234%22%20fill%3D%22none%22%20stroke%3D%22%2307070a%22%20stroke-width%3D%2224%22%2F%3E%3C%2Fg%3E%3Cg%20transform%3D%22translate(230%2090)%20rotate(0)%20scale(1.9)%22%3E%3Ccircle%20cx%3D%220%22%20cy%3D%220%22%20r%3D%2250%22%20fill%3D%22%23ccef58%22%2F%3E%3C%2Fg%3E%3Cg%20transform%3D%22translate(150%2020)%20rotate(0)%20scale(1.1)%22%3E%3Cpath%20d%3D%22M-50%2C-50%20L50%2C-50%20A100%2C100%200%200%201%20-50%2C50%20Z%22%20fill%3D%22%23ffffff%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)
%20rotate(0)%20scale(2.2)%22%3E%3Ccircle%20cx%3D%220%22%20cy%3D%220%22%20r%3D%2234%22%20fill%3D%22none%22%20stroke%3D%22%2307070a%22%20stroke-width%3D%2224%22%2F%3E%3C%2Fg%3E%3Cg%20transform%3D%22translate(40%20-20)%20rotate(0)%20scale(1.2)%22%3E%3Ccircle%20cx%3D%220%22%20cy%3D%220%22%20r%3D%2234%22%20fill%3D%22none%22%20stroke%3D%22%23ccef58%22%20stroke-width%3D%2224%22%2F%3E%3C%2Fg%3E%3Cg%20transform%3D%22translate(250%2020)%20rotate(45)%20scale(1)%22%3E%3Ccircle%20cx%3D%220%22%20cy%3D%220%22%20r%3D%2234%22%20fill%3D%22none%22%20stroke%3D%22%23ffffff%22%20stroke-width%3D%2224%22%2F%3E%3C%2Fg%3E%3C%2Fsvg%3E)