Notes from the team behind Authsome. Integration patterns, agent credential workflows, security tradeoffs, and product updates — written for builders, not buyers.
Top agent proxy tools in 2026: what each one does and what to know before picking one.
Eight tools that sit between AI agents and the services they call. Not a comparison post. A walking tour of the category so you know what each is for, what it's good at, and where it'll bite you.
What is MCP? A developer's primer on the Model Context Protocol.
The protocol that connects AI agents to external tools. What MCP actually is, how the architecture works, what to build with it, and the auth questions nobody answers.
AI agent security in 2026: the four threat models you actually need to think about.
Prompt injection, credential exfiltration, runaway autonomy, supply chain. What each one looks like in practice, how attacks actually unfold, and which defenses work.
Claude Code: the production-ready setup guide.
Beyond the install screen. Skills, MCP servers, multi-account auth, CI usage, and the credential layer that keeps it from leaking. The setup I wish someone had handed me on day one.
Headless agent OAuth: the device code flow explained.
How OAuth2 device authorization works, why it's the right pattern for SSH sessions and CI runners, and what the RFC doesn't quite tell you.