Den

Den

@den.dev

Lead Maintainer of Model Context Protocol

1.6K followers382 following264 posts

People underestimate just how much we’re moving into the post-code way of shipping software and how high of a premium will be put on good taste, agency, and just the plain ability to communicate well.

@seldo.com is, once again, spot on.

Laurie Voss@seldo.com

My talk "the death of the code review" hit 100k views recently. This talk, "the rise of the product engineer" is basically the sequel, exploring what happens after you automate everything engineers do: https://youtu.be/kspZP5BgkEU?is=th5b1CKyIUNDEK63

Not exactly a great week for the "HTTPS lock means it's safe" guideline.

My thoughts go to every cheap router or modem deployed somewhere that runs a PHP version from 1997.

nightshade →home, for now@nightshade.technology

if you are running a PHP application - it does not matter what it is - you are vulnerable. if you are running some embedded firmware that uses PHP to serve its web UI - you are vulnerable. full details and a patch at 2 PM UTC sharp tomorrow, you have been advised to prepare to patch immediately

Gave a talk on MCP and agent auth at FIDO Authenticate in San Diego - with some Twilio friends, of course. This place is amazing.

Kenney’s assets are wonderful. I was looking at having a creative set for my personal blog OpenGraph images to be a bit more fun when they are randomly generated for each post, and Kenney’s work was my go-to.

Kenney@kenney.nl

New followers (👋) so little introduction; for the past 10+ years I've been releasing public domain game assets to support indies & students. You can donate, but it's totally optional. I hope to continue supporting our industry for many more years to come, thanks for your follow/support! kenney.nl

They clearly just need a MCP server.

This post is unavailable.

Three months and counting, still baffled this is not solved and instead there’s talk about easier monetization.

Den@den.dev

How is Bluesky STILL relying on emails for 2FA in 2026? Yubikeys and authenticator apps have been invented, right? I didn't dream it up?

This is actually really cool - I’m a big fan of both the Halo Museum and @halopedia.org 🙌

CIA391 - Chris Aiken@cia391.bsky.social

@den.dev hey there. I was reviewing stuff us at @halopedia.org was missing on the Wiki and figured I should ask as per your notice on your website. Could we use images from this blog post on the wiki to help document the Halo Museum? den.dev/blog/halo-mu...

Den reposted

In the next MCP animated adventure, I attempt to explain the difference between the different OAuth client registration methods we support at spec-level.

In the next MCP animated adventure, I attempt to explain the difference between the different OAuth client registration methods we support at spec-level.

I am doing all my MCP explainers like this now. Just like the magical one talking about the magic of Enterprise-Managed Auth 🧙‍♂️

We’ve recently moved all PRs in the Model Context Protocol repositories to be limited to collaborators only. Too many low-quality submissions that someone still has to review and triage. We ask that folks start engaging with us directly on Discord for new proposals first.

Sindre Sorhus@sindresorhus.com

Due to AI, I have disabled external pull requests on all my repos. Open source, as we have known it, was fun while it lasted. (It’s been 15 years for me) I will still maintain projects and handle issues.

Few weeks ago got to visit Amsterdam and ramble about how shipping a new MCP spec is less intimidating than folks might assume 🤩 Full talk: dsc.ai/XmxeuL

One of the interesting observations that I had about my dev/computer usage in the past few years is that I became entirely OS/ecosystem-agnostic. There is absolutely no point in being super-attached to one platform, especially with a lot of tools now running really well cross-plat.

Sometimes folks forget that MCP as a protocol is never actually "done" - we're constantly iterating on changes and releasing new revisions. For a protocol with this scope and adoption, I am actually pleasantly surprised how quickly we can move. dsc.ai/mcp-seoul-ke...

Den reposted

i complained a lot about the mcp spec in the past but it's getting very good now

By the way, we just GA-d Enterprise Managed Auth (EMA) for MCP in Claude. No more auth prompts - just smooth SSO sailing for supported connectors.

For the past few months, I've been almost exclusively running everything in my life on Linux. Claude has been a massive unlock in helping me customize it and diagnose emerging issues quickly, and it doesn't feel as bad as it was even just a few years back. And surprisingly, it... just works?

Don't mind me, just reverse-engineering my way to playable Hunters in Halo: Campaign Evolved.

We are so back 💪 @simonwillison.net - if you have any feedback, all ears. Happy to make sure that the new spec and specs beyond it work well for devs.

OMG, so I discovered secret machinima controls in Halo: Campaign Evolved, and by proxy learned that all this time I was playing as a half-body ghost?

This is pretty amazing. Free cam in Halo: Campaign Evolved CAN, in fact, be unlocked.

Well that's neat 😏 You can hook into some debugging modes in the game.

How is Bluesky STILL relying on emails for 2FA in 2026? Yubikeys and authenticator apps have been invented, right? I didn't dream it up?

It's nice to see how in the past week alone ID-JAG picked up so much community traction. Who knew - people don't like to be annoyed by unnecessary auth prompts.

More people need to get comfortable with doing multi-agent adversarial analysis on their code.

I'm not kidding, Enterprise Managed Auth is probably the one thing that I am most excited about in the auth space this year. One SSO auth into Claude and you're logged into a bunch of other MCP servers automatically. Magic. You can sign your org up 👉 dsc.ai/emaw

Den reposted

I am getting tired of overpermissioned tokens floating around, so the new MCP spec will be better for those that like step-up auth.