- 24 October 2026 · 8 min
From read-only to governed: auditing my own MCP server
mcp-zerodha gives an AI model a real brokerage account and was already read-only. Auditing it the way an enterprise reviewer would still found five gaps. Here is each one and its fix.
- 2 September 2026 · 6 min
What actually goes wrong with a team of agents
Running architect, engineer, QA and dev-lead agents across three production repos. The interesting failures were not bad code — they were agents manufacturing their own authority.
- 24 August 2026 · 6 min
Read-only by default: how mcp-multi-db enforces it
A walk through the two layers that make an MCP server safe to point at a real database — a SQL-text guard that is allowed to be imperfect, and a connection that cannot write.