Blog

Notes on AI engineering, full-stack architecture and the products I build, from LLM pipelines and evals to shipping on web and mobile.

Oct 13, 20263 min read

Building a production MCP server with OAuth 2.1: lessons from shipping one

What it took to let customers connect Claude and ChatGPT to their own data safely: OAuth 2.1 with PKCE, dynamic client registration, scoped tools, live permissions and rate limits per connection.

MCP AI Engineering Security

Diagram of an AI assistant connecting to an MCP server through OAuth 2.1