Securing MCP Servers and Agent Tools
October 20, 2026
Every tool you give a model is a capability that anyone who can influence the model’s input might be able to use. Design for that from the start.
Read MoreI have almost 10 years of experience helping teams build, test, and deliver reliable software faster. From application code to the infrastructure it runs on. I work as a consultant helping teams do the same. I'm also the creator and founder of everscribe.io, the easiest way to add an audit trail to single and multi-tenant web applications.
I'm the creator and founder of everscribe.io, an audit trail provider API for single and multi-tenant web apps. In addition to the API, I've also authored Everscribe's open-source ecosystem, which contains a plethora of open-source developer tools like SDKs/client libraries, command line tools, and web components.
github.com/everscribeSetup tutorial on the Everscribe YouTube channel.
Middleware for net/http, chi, gin, echo, fiber and more, plus a recorder and token minter.
Middleware for Express, Fastify and Hono, with interceptors for gRPC servers.
A branded, live audit-trail UI. React package, an <audit-trail> web component, and a framework-agnostic core.
Manage projects and API keys, and query or live-tail audit events from your terminal.
Full-stack runnable examples for single and multi-tenant applications.
I'm an open-source maintainer of akuity/kargo. Here are some of my contributions.
Specialties
October 20, 2026
Every tool you give a model is a capability that anyone who can influence the model’s input might be able to use. Design for that from the start.
Read MoreSeptember 15, 2026
Every turn of an agent re-sends the whole conversation. Prompt caching lets you pay full price for that prefix once, then a fraction of it on every turn after.
Read MoreAugust 18, 2026
Tools get all the attention, but MCP servers can also expose data and reusable prompts, and they don’t have to run on your laptop.
Read MoreJuly 21, 2026
An agent is a tool-calling loop that runs until the job is done. The happy path fits in twenty lines. Production needs a few more.
Read MoreJune 16, 2026
A tool that works when you call it can still fail when a model calls it. Good tool design is API design for a reader that takes every word literally.
Read MoreMay 19, 2026
The Model Context Protocol lets you write a tool once and use it from any AI client that speaks MCP. Here’s how to build one in Go.
Read More