» Tag
mcp
107 postsMCP Sessions Moved Into the Payload: Sticky, Redis, Continuations Compared
MCP dropped server sessions for MRTR; a Rust rmcp v3 benchmark measures sticky, Redis, and sealed-continuation state strategies.
6 MCP Servers, One Agent: What the Token Bill Really Showed
An engineer benchmarked 6 MCP servers on one agent, exposing hidden token, latency, and OAuth costs — and the four fixes that cut spend by 53%.
mcpgrade audit: a third of 36 popular MCP servers score D or F
mcpgrade graded 36 MCP servers on agent usability, not spec compliance — a third scored D/F due to undocumented parameters and naming collisions.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comMCP Security Needs Four Layers, Not Just a Gateway
Why MCP security requires four separate control layers beyond the gateway, backed by real CVEs and practical production controls.
ToolDNS: Using DNS Infrastructure for Scalable AI Tool Discovery
ToolDNS repurposes DNS infrastructure to enable O(log N) semantic discovery across millions of AI tools, cutting search space by over 95%.
MCP's Confused Deputy Problem: Provenance Gaps, Injection, DNS Rebinding
MCP's confused deputy flaw explained: provenance gaps, prompt injection via fetch servers, DNS rebinding, and concrete detection rules.
NMEMORY: An AI Agent Memory That Refuses to Guess
NMEMORY is a local, network-isolated AI agent memory over MCP that abstains instead of fabricating answers. Rust, SQLite, 21 MCP tools, verifiable guarantees.
AI Agent Cost Drift: Rolling Dashboards Miss 0.35%/Day Creep
Why do rolling-average dashboards miss a 0.35%/day AI agent cost increase? A math proof and 60-day test show the blind spot - and the fix.
Rethinking MCP Security: A Large-Scale Study of 64K Runtime Servers
MCPZoo tests 64,611 MCP servers, revealing that most security scanner alerts are false positives and scanners disagree widely.
ButterClaw: Self-Hosted Runtime Security for AI Agents, No Cloud
ButterClaw enforces AI agent security locally with regex signatures, a local LLM verdict pipeline, and SIGKILL/credential shredding — no cloud, no telemetry.