📰 Dev.to · Mads Hansen

An agent proposes an action from database evidence. A reviewer changes it and approves. The action...

An internal IAM gateway and an external OAuth gateway expose the same database tool. Both...

Creating a new database secret is the beginning of a rotation—not the end. The old credential may...

An audit log can begin as a security control and end as a second database full of sensitive...

A read-only AI database tool can block names, emails, and row exports and still reveal a...

An AI agent rarely consumes a large PostgreSQL result in one call. It reads a page, reasons, calls...

An audit log should explain what happened. It should not quietly become a second database containing...

An MCP credential is not revoked when the control plane says “disabled.” It is revoked when every...

Most connector evaluations begin with a question the team already knows how to answer. The demo...

The fastest way to make an MCP demo work is to put a powerful credential close to the tool. The...

Tool discovery is useful in a demo. In production, it can become a permission problem. If an MCP...

Most API documentation is written for humans. MCP tool descriptions are different. They are read by...

There's a pattern in post-mortems that nobody talks about. A CVE drops. Security team checks the...