Posts (238+)

Browse the full archive. Use topics in the sidebar to explore by tag.

August 2026

Hardening MCP Servers:Auth, Least Privilege, and Tool Safety

Trust boundaries, host approval UX, env secrets, input validation, read-only vs mutating tools, and a practical hardening checklist for a TypeScript MCP bookmarks server.

AI/ML

Host an MCP Server for Public Use:Streamable HTTP and a Live URL

Serve the bookmarks MCP tools over Streamable HTTP with createMcpHandler, protect them with a bearer token, deploy one PaaS URL, and point Cursor at url plus headers.

AI/ML

Ship Your MCP Server:npm Package and the MCP Registry

Package a TypeScript MCP server for npm, add mcpName verification, publish with npm, and register metadata with mcp-publisher — distribution, not hosting.

Java

Compact Source Files and Instance Main:`void main()` Without the Boilerplate

What compact source files are (JEP 512 / Java 25): implicit classes, instance main methods, java.lang.IO, and automatic java.base imports — without public static void main ceremony.

AI/ML

Plug In an MCP Server in Cursor:Your First Working Connection

Wire a local MCP server in Cursor with mcp.json — project vs global config, field-by-field stdio setup, verify Connected, and run one approved tool call.

AI/ML

Build Your First MCP Server in TypeScript:Tools Over stdio

Build a local bookmarks MCP server in TypeScript — McpServer, Zod tools, stderr logging, MCP Inspector first, then wire the build into Cursor over stdio.

AI/ML

MCP Beyond Tools:Resources and Prompts in the Same Server

Add an MCP resource and prompt to a TypeScript stdio server — bootstrap from the bookmarks part-3 tag, verify in Inspector, and note Cursor host limits.

AI/ML

MCP Without the Hype:What It Is and Why Agents Need It

What the Model Context Protocol is, the host/client/server vocabulary, tools vs resources vs prompts, and when agents need MCP — or when Skills and rules are enough.

Algorithms

Strongly Connected Components:Collapse a Directed Graph to a DAG

DFS to record finish order, transpose the digraph, DFS again in reverse finish order — each second-pass tree is a strongly connected component, and the condensation is a DAG.

Java

Compact Object Headers:Cut Header Size Without Changing a Line of Code

What JEP 519 compact object headers are: shrink 64-bit HotSpot headers from 12–16 bytes to 8 without changing application source, how to enable the flag on 24/25, and why Java 27 turns it on by default.