Writing archive
Applied AI, cloud engineering, data systems, security, and the occasional argument about how software should be built.
The MCP authorization draft deprecates Dynamic Client Registration as a compatibility fallback, not as an OAuth mechanism globally. Client ID Metadata Documents offer portable, origin-associated metadata, but do not authenticate a running public client. This article explains the operational trade-offs, localhost impersonation risks and metadata-fetch protections that remain.
An OAuth proxy can connect MCP clients to an Entra-backed service while keeping downstream registration separate from upstream application provisioning. This conceptual walkthrough explains the two authorization transactions, per-client consent, token validation and refresh limits that make the proxy a security-critical authorization server.
Your UI is just one client now; your apps must now treat humans, LLMs, and peer agents as equal consumers.
Azure Monitor quietly shipped a native OTLP endpoint. Here's how to send traces, metrics, and logs to App Insights from a plain Python app — no vendor SDK, your instrumentation stays portable.
A journey inspired by the Artemis II mission—from a simple question about why we do not fall off a spherical Earth to the discovery that all energy ultimately reduces to light. Along the way, we explore gravity, the vacuum of space, engineered combustion, and the thermodynamic fate of every sound and vibration in the universe.
