This session from Craig Jellick at the MCP Dev Summit makes the case for a more likely problem: a compromised MCP server you trusted too quickly. He gets into what that looks like in practice and how to handle it:

Most workflow engines 𝘤𝘰𝘯𝘴𝘶𝘮𝘦 MCP. This session shows what happens when you 𝗯𝘂𝗶𝗹𝗱 one on MCP. Donnie Adams (Obot AI) walks through tasks, sampling, dynamic tools, and real-world orchestration patterns:

Getting an #MCP server up and running doesn’t have to be complicated. This walkthrough shows how to build a simple #MCPserver in Python and host it in the Obot MCP Gateway, so you can understand how everything connects without getting lost in complexity. Read more on our blog:

MCP adoption in the enterprise is still early, but moving fast. At MCP Dev Summit, our own Sheng Liang broke down what it takes to move MCP into production, based on real deployments across gateways, registries, and workflows. A solid look at where things stand right now:

𝘛𝘩𝘦 𝘊𝘰𝘯𝘵𝘦𝘹𝘵 is back! ➡️ How Pipe17 is Embracing the Emerging standards of Agentic Commerce through UCP and onX with Kelly Goetsch, CTO at Pipe17 Tomorrow, April 16th at 10am PT / 1pm ET 🔗 buff.ly/vmx1U7u We'll see you there! #MCP

At MCP Dev Summit North America last week, one talk stuck with me. Meghana Somasundara and Rush Tehrani from Uber walked through what a real enterprise MCP strategy looks like in practice. They’ve built is exactly what we’re building at Obot AI: for everyone else. buff.ly/ZYLmQ8x

Ten posts. One series. This is where it comes together. OAuth, identity, access, tokens, prompt injection, PII leakage. This final post brings it into one place with a clear MCP architecture and a checklist to see where you stand and what’s left: buff.ly/xax4lYL

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 9 of 10 Access controls are in place. Security review passed. And data is still leaking — from inside MCP tool calls. The gap isn’t access but what data flows after access is granted. Here's what to watch for: buff.ly/fbDyurg

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 8 of 10 Prompt injection feels abstract until you map it to how MCP agents actually work. Then it gets real. What it looks like in practice, why agents are exposed, and how to handle it at the infrastructure layer: buff.ly/xhcrIZL #MCP

🔥 Are you attending Craig's session? (Craig Jellick is our VP of Engineering and co-founder of Obot AI) "The Boring Attack That Will Actually Get You" is underway now at #MCPDevSummit!

On the stage now at #MCPDevSummit, Donnie Adams for his session "Building a Workflow Engine on MCP: Orchestrating Processes With Tasks" 👏

The Obot Lego figures have officially taken over here at #MCPDevSummit 😄 They’ve claimed the cup, found the snacks, and are already making themselves at home. They'll be at our booth at the reception this evening… come say hi before they eat all the mints too!

Sheng Liang delivering his keynote at #MCPDevSummit!

Our own Shannon Williams kicks off the #MCPDevSummit in NYC! 🚀

Will we see you in NYC? 👀 #MCPDevSummit is put on by the Linux Foundation, which means the conversation stays technical, open, and grounded. See you there starting Thursday! April 2-3 | New York Marriott Marquis #MCP #LinuxFoundation #AgenticAI

🚨 4 days to the #MCPDevSummit 🚨 Block your calendar. Check the schedule. Figure out which sessions you're not willing to miss: buff.ly/KUDM3kh

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 7 of 10 Most MCP access control starts at the server level. In practice, that often means access to every tool behind it....read, write, delete included. This post looks at why tool-level control matters and how to approach it: buff.ly/pwc1KGI

We're 5 days out to NYC! 🗽 If you're headed to the #MCPDevSummit and want to connect with our team, we'll have a tabletop on-site, plus sessions. Come say hi, ask questions, and get some swag! #MCP #AIAgents #NYC Get all the details here buff.ly/KUDM3kh

MCP went from spec to ecosystem faster than almost anything we've seen in infrastructure. That's why #MCPDevSummit exists — and why we're proud to be a 💎 Diamond Sponsor. See you next week (April 2-3) in NYC! #ModelContextProtocol #MCP #AIAgents

T-minus 6 days. The schedule for #MCPDevSummit is worth a look if you haven't dug in yet — there's a lot happening across both days: buff.ly/QbYPtsX We'll be there, so be sure to find our tabletop and say hi 👋🏻 #MCP #AgenticAI

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 6 of 10 Built something with #MCP and getting ready for production? Security reviews tend to slow things down—not because MCP is risky, but because it’s new and connects AI agents to real systems. Read the blog post here: buff.ly/MMT8RLL

Our CEO Sheng Liang is a featured speaker at #MCPDevSummit — April 2-3 in New York (next week!) Sheng's been building open source infrastructure since before most AI companies existed, and his perspective on where MCP is headed is worth showing up for. 🎯 See the full lineup here: buff.ly/TwGM01r

Who's going to the #MCPDevSummit next week? 👀 Check the attendee list: buff.ly/uTbmFKg We can't wait to see you there! #MCP #AIAgents #NYC

7 days. NYC. The whole MCP ecosystem in one room. We'll be there as a Diamond Sponsor — find us at our tabletop, catch our sessions, and let's talk agentic AI. 👉 buff.ly/ylxpzN5 #MCPDevSummit #AgenticAI #MCP

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 5 of 10 MCP servers often rely on a single API key—just like SendGrid or Twilio. Managing that shared credential securely, without adding more infrastructure, is where things get tricky. Read more here: buff.ly/9TO4pCd

We’re proud to be a Diamond Sponsor of #MCPDevSummit in NYC on April 2–3, and we’re showing up with a full lineup. See what we’re bringing to MCP Dev Summit here: buff.ly/KUDM3kh

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 4 of 10 A lot of MCP security focus is on access. Less attention goes to what happens after auth — specifically, where the OAuth token lives. That choice creates a security boundary most teams don’t see at first: buff.ly/w7orCkh

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 3 of 10 Running into issues connecting MCP clients with Microsoft Entra ID? It often comes down to Dynamic Client Registration — required by MCP, not supported by Entra. What that means (and what to do): buff.ly/pz2pgnH

AI agents can do almost anything… and that’s exactly the problem. In yesterday's episode of 𝘛𝘩𝘦 𝘊𝘰𝘯𝘵𝘦𝘹𝘵, we break down AIP (Agent Identity Protocol) and how it could bring real control to MCP + agent systems. 🔗 Watch here: buff.ly/RJGcXzt #AI #MCP #AISecurity

We’re live in 𝗢𝗡𝗘 𝗛𝗢𝗨𝗥 ⏳ Join us at 10am PT / 1pm ET for today’s episode of 𝘛𝘩𝘦 𝘊𝘰𝘯𝘵𝘦𝘹𝘵. Watch here:

𝘚𝘦𝘳𝘪𝘦𝘴: 𝘌𝘯𝘢𝘣𝘭𝘪𝘯𝘨 𝘔𝘊𝘗 𝘢𝘵 𝘌𝘯𝘵𝘦𝘳𝘱𝘳𝘪𝘴𝘦 𝘚𝘤𝘢𝘭𝘦 | Post 2 of 10 | OAuth is already more work than most teams expect for one MCP server—and it has nothing to do with your actual use case. Now multiply that by ten: buff.ly/0CVsMKL

Reminder: The Context is tomorrow! Join us to hear more from our guests: James Cao (Ironwood Cyber & Founder of Montcao) Ali Kolahdoozan (NET/Gen AI Developer - iteasy) 📅 Thurs. Mar 19th 🕙 10am PT / 1pm ET Join us on YouTube: buff.ly/Qr5KOf7

MCP vulnerabilities aren't theoretical anymore. They're active in the wild. Six concrete attack patterns, why conventional security testing misses them, and a practical defense framework CISOs need right now. buff.ly/fLCvvWE

The Context is back this Thursday: ➡️ Agent Identity Protocol (AIP): The Zero-Trust Identity Layer for MCP & Autonomous Agents | James Cao ➡️ Architecting Context-Aware AI Systems with MCP and .NET — Ali Kolahdoozan 📅 Thurs. Mar 19th | 🕙 10am PT / 1pm ET Watch live: buff.ly/Qr5KOf7

Building an MCP server is fast. You can wire up tools and business logic in hours. Then you try connecting to a real enterprise system… and OAuth enters the chat. Suddenly the timeline you gave your manager looks optimistic. It’s not really an MCP problem. It’s an OAuth one: buff.ly/xeT7x13

Getting started with Obot AI is simple. Run it locally with Docker, deploy on Kubernetes, or explore hosted options to test quickly. docs.obot.ai obot.ai #MCP

Using AI agents to write code is great until you’re stuck waiting for them to finish. Discobot lets you run multiple coding agents in parallel across isolated sandboxes so you can keep building instead of waiting. Read more here: buff.ly/OtECqlD

#MCPservers are showing up everywhere right now, and teams are starting to ask the same question: where should they actually run? Hosted service, self hosted infrastructure, or local? Each option has tradeoffs depending on your team, stage, and security needs. We break it down here: buff.ly/CpwVzdY

ICYMI: Last week on 𝘛𝘩𝘦 𝘊𝘰𝘯𝘵𝘦𝘹𝘵 • MCP security and OAuth at scale • Centralized control planes for MCP servers • Auditing and governance for enterprise deployments • Filtering requests to prevent sensitive data leaks ▶️ Watch the full episode here: buff.ly/UvoliVG

Everyone’s talking about MCP adoption, but fewer people are talking about architecture. Single MCP gateway or multiple MCP servers? It’s not just a routing choice. It’s an authentication and governance decision that shapes everything downstream. We break it down here: buff.ly/BoN1sIw #MCPGateway

Join us this Thursday for the next episode of The Context ➡️ 𝗜𝗺𝗽𝗹𝗲𝗺𝗲𝗻𝘁𝗶𝗻𝗴 𝗰𝗲𝗻𝘁𝗿𝗮𝗹𝗶𝘇𝗲𝗱 𝗮𝘂𝘁𝗵 𝗺𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 𝗮𝗻𝗱 𝗴𝗼𝘃𝗲𝗿𝗻𝗮𝗻𝗰𝗲 𝗳𝗼𝗿 𝗠𝗖𝗣 𝘀𝗲𝗿𝘃𝗲𝗿𝘀 with Bill Maxwell from Obot AI. 📅 March 5th ⏰ 10am PT / 1pm ET 📺 Live on YouTube: buff.ly/CX3WcAI

Last Thursday on The Context, Liran Tal from Snyk broke down MCP security where it gets real: prompt injection through normal workflows, malicious tools, and old school bugs showing up in MCP server code. If you are building with MCP, check out this episode:

We’re proud to sponsor #MCPDevSummit, April 2-3 in New York City! 🏙️ This is where the MCP ecosystem comes together to build, share, and move the protocol forward. Register now + join us 👉 bit.ly/4rAHtub 🔥 Explore the schedule: bit.ly/4a1LFxn

🚨 Going live in 1 hour 🚨 The “S” in MCP Stands for Security: Why Your AI Assistant is an Insider Threat with Liran Tal, Head of Developer Relations & Community at Snyk Join us live for this next episode of The Context! 🕙 10am PT / 1pm ET 📺 Watch here: buff.ly/8X0uyQH

Our Enterprise MCP Quick Start Guide gives you a 12-week roadmap with progression criteria, architecture patterns, infra requirements, and implementation guidance from Kubernetes to access control. Download it here: buff.ly/RLXM1BC : buff.ly/RLXM1BC #MCP #EnterpriseAI

Tomorrow on The Context 👇 ➡️ The “S” in MCP Stands for Security: Why Your AI Assistant is an Insider Threat with Liran Tal from Snyk If MCP is part of your stack, this is a conversation you’ll want to be in. 🕙 10am PT / 1pm ET 📺 Live on YouTube: buff.ly/8X0uyQH

Obot is an open source MCP gateway that centralizes your servers in a single catalog, enforces access through your existing SSO groups, and runs on infrastructure you control. Learn more at Obot.ai #MCP #EnterpriseAI

This week on The Context: “The S in MCP Stands for Security: Why Your AI Assistant is an Insider Threat” with Liran Tal, Head of Developer Relations & Community at Snyk 🗓 February 26th - 10am PT / 1pm ET Live stream here: buff.ly/8X0uyQH

Did you miss our latest update? 👀 Obot v0.16.0 is 𝗹𝗶𝘃𝗲 — focused on enterprise readiness and operational control. Obot now includes: • API key authentication • Model access policies • Enhanced Azure OpenAI support • Kubernetes capacity dashboard buff.ly/BfWKBAa #MCP #MCPservers

IT leaders are discovering developers already running MCP locally — scattered credentials, no visibility, no audit trail. So the real decision: Manage MCP centrally — or let it stay shadow IT? Here’s what centralized MCP management looks like: buff.ly/0qnYD1T #MCP #MCPServers