MCP

MCP (Model Context Protocol) is the open standard that lets AI agents reach your software through a typed tool interface. These notes cover what it is, when building a server is worth it, and the patterns that hold up in production.

7 articles

A dark app window whose five lit buttons are wired through its edge to a glowing amaranth orb on the right

WebMCP in 2026: the browser API that lets agents use your SaaS UI

WebMCP lets a web page register tools that browser AI agents call directly. Chrome 149 runs it as an origin trial. What it changes for SaaS interfaces.

A spec document at the centre of a ring of twelve lit member tiles, each wired to it, two of its lines struck through; on the left a single dark tile it came from, fading copies between

MCP governance in 2026: what the Linux Foundation handoff changed

Anthropic donated MCP to the Linux Foundation in December 2025. Who decides the spec now, what the 2026-07-28 release removed, and what to check.

Scattered requests converging on the single opening in a wall, passing a lit lock tile into a server panel, with dotted lines dropping to a long audit strip below

Harden an MCP server for enterprise: SSO, audit, gateway

A 2026 scan found 33% of MCP servers had critical vulnerabilities. Here is how to add OAuth 2.1 SSO, audit trails, and a gateway to yours.

A lit server tile inside a countdown ring with a quarter remaining, beside eight staggered short bars fading from old to new, only the newest lit

Short-lived MCP server URLs: the TTL pattern for AI agents in 2026

1,467 MCP servers are exposed on the public internet with no auth, per Trend Micro. Short-lived URLs with a TTL of minutes, not days, close the hole.

A hexagonal radar chart with six axes, an amaranth shape and a white dashed shape overlapping, each reaching further on different axes

Managed vs self-hosted MCP server: 6 axes that decide it

Time to first tool, auth, security posture, cost at scale, data residency, protocol velocity. The six axes that decide whether you build an MCP server or buy.

A dark app window with a lit port on its right edge; a line from it passes a lit lock, with a stack of pills hung below, to a large lit tile; four dashed branches end in hollow rings

Next.js MCP server: mcp-handler, OAuth 2.1, Redis sessions

Mount an MCP server on a live Next.js 16 SaaS with mcp-handler: the dynamic transport route, OAuth 2.1, Redis session state, and 4 failure modes.

On an amaranth ground, five dark agent circles whose cables join into one plug fitted to a white port on a dark product panel full of lit feature tiles

What is MCP and why your SaaS needs an MCP server in 2026

MCP is the open protocol AI agents use to call your SaaS. Here is what it is, how it works, and when your product should ship a server in 2026.

Back to Field notes