How is Bluesky STILL relying on emails for 2FA in 2026? Yubikeys and authenticator apps have been invented, right? I didn't dream it up?

Brand new MCP SDKs just dropped for those of you who are brave enough to be on beta branches to test the new spec ✨ dsc.ai/sdk-betas

It's nice to see how in the past week alone ID-JAG picked up so much community traction. Who knew - people don't like to be annoyed by unnecessary auth prompts.

Plugged @standard.site integration for my blog and it's been a delight!

More people need to get comfortable with doing multi-agent adversarial analysis on their code.

I'm not kidding, Enterprise Managed Auth is probably the one thing that I am most excited about in the auth space this year. One SSO auth into Claude and you're logged into a bunch of other MCP servers automatically. Magic. You can sign your org up 👉 dsc.ai/emaw

very cool. here’s the link. it covers over a big sharp edge in authentication and makes MCP far more accessible to broad enterprise use blog.modelcontextprotocol.io/posts/enterp...

Unreal. Our today's MCP announcement is top of HN right now.

I am getting tired of overpermissioned tokens floating around, so the new MCP spec will be better for those that like step-up auth.

MCP is gonna be stateless starting the next protocol version ✨

Don't sleep on MCP Tunnels 🫨 dsc.ai/mcpt

We're cooking a new MCP spec version 🍳 dsc.ai/mcpspec

Still surreal to think this happened.

Part of the reason the default in the spec now is recommending CIMD - one client, basically determined by DNS.

TIL recently, the client credentials flow is now part of the MCP specification (as an extension). This lets agents egage directly with an MCP server, rather than always acting on-behalf-of a human users. Check it out here: modelcontextprotocol.io/extensions/a... Any #mcp devs implement this?

I'm on a mission to make Claude the best MCP client. Diving deep into every MCP issue in our public repos. Having MCP problems with Anthropic products? File here: ✨ github.com/anthropics/c... ✨ github.com/anthropics/c... Blocked or no response? Tag me, we'll fix it.

GitHub MCP is really good if you want GitHub functionality on the go. If you have a local environment, use the CLI.

Hear. Actively working with the team on fixing it and making Claude the best client for MCP. You might see me actively and aggressively triage all inbound GitHub issues for Claude MCP integration you all submit.

Folks also often miss the fact that CLIs are perfectly fine if you have an unrestricted local environment. What happens when I want to do something from my phone or a corporate machine that requires data exfil controls and fine-grained AuthZ?

Truly excellent work from Anthropic. I think this is a promising interpretability technique, but what I really like is that they’ve made code available for open weight models.

We kind of went all-in with MCP Apps in Claude ✨ dsc.ai/5qcESt

Gotta be honest. It is really cool to see SPIFFE catching on. It’s been a long journey but it is great when people get it.

More MCP goodness 🎉

So this happened today.

i feel like my job as an engineer has always been asking questions like "how" and "why". it wasn't really "write code". sure, the latter was the "how" very often, but that was simply because at one point that _was_ the only "how" that was available

They do! We intentionally built PRM support into the MCP spec to make sure that every client (even beyond Claude) can have a simple way to discover how to handle auth.

As a Blender user, I’m really excited about this - and even more excited about a Blender MCP server (totally not biased here).

This is broadly right in the sense that the majority of people don’t know what MCP is or what it does. They don’t need to, TBH. It’s plumbing - it powers integrations with AI systems. People don’t think about it the same way we don’t think about the type of pipes inside a wall (until they break).

Every MCP server connection is just @steveklabnik.com manually curl-ing API requests. Make his life easier - use OAuth, please.

The more I think about this, the more I recognize how likely very close to truth this assertion is. Dev tooling, especially when it comes to process automation, needs a rethink. Too much hinges on Rube Goldberg machines.

If you’ve used MCP or built with MCP, what are the biggest papercuts we can help fix?

I am honestly in constant awe seeing the creative ways people use MCP for other creative tasks. We just launched Claude for Creative Work with a bunch of really cool MCP servers that I am excited for you to go try - and tell us how we can make this experience better! Announcement: dsc.ai/Kb5T7a

I’m so excited about this 🙌

This is cool. Asked Claude to generate some color options for this UI element, and it generated a bunch of sample palettes + UI mockups.

Hell yeah, let's go! Going to have some cool research coming soon.

But has Bluesky considered MCProto?

MCP Apps are now supported on Claude for iOS and Android ✨ dsc.ai/cmapps

We just launched Claude Opus 4.7 ✨ www.anthropic.com/news/claude-...

oh HELL YES claude code finally supports detecting MCP servers that auth has expired on, and getting user to do re-auth in-line, rather than pretending the MCP server mysteriously doesn't exist

Tiny personal news - I am now one of the Lead Maintainers for Model Context Protocol 👋 More work ahead, so if you have any feedback about the protocol, its docs, SDKs, or anything at all - let me know!

To this day, it baffles me that @github.com cannot solve the domain squatting issue with GitHub Pages. If you register a custom domain and set its DNS settings to point to GitHub Pages, but between that point and you setting it in the repo someone sets it to their repo... they just can do that?

Ran into @aparker.io and that led to me now being a proud owner of this gem.

We’re about to kick off a whole week of MCP goodness in NYC 🗽

Bluesky is made with AI, the engineers and even some non-engineers use Claude code

Here's the best way for me to explain how fast the MCP SDK for Python is growing.

To this day, I am still fascinated by just how much the MCP TypeScript SDK is downloaded DAILY.

One thing I'm really proud of with MCP is that we actually document the security stuff that can go wrong instead of pretending it doesn't exist. if you're building with MCP auth, the guide we have on the public docs is genuinely worth a read: dsc.ai/sbp

Inventing AI was worth it just for the DataDog MCP

MCP context management is a solved problem. I mean, look at the work that we deployed for the Claude platform (it's used across Claude, Cowork, and Claude Code) and the impact it had. 👉 dsc.ai/tst

Ya know what makes your Monday? Claude Code now supports CIMD for MCP OAuth ✨ If your MCP server uses Client ID Metadata Documents, Claude Code discovers and handles it automatically. No funky registration dance or manual client setup! In case you're not yet using Claude Code: dsc.ai/clc