Building a Production MCP Server: OAuth, Tool Boundaries and State
What changes when an MCP server moves beyond a local demo: OAuth, constrained tool contracts, identity isolation, bounded queries, persistence and production failure boundaries.
Technical writing
Notes based on real AI tooling, architecture, integration, reliability and software operations problems.
What changes when an MCP server moves beyond a local demo: OAuth, constrained tool contracts, identity isolation, bounded queries, persistence and production failure boundaries.
A practical approach to taking over an existing production system: mapping architecture, restoring deployability, identifying risk, validating dependencies and earning confidence before making large changes.
How to design resilient third-party API pipelines with timeouts, retries, freshness policies, circuit breakers, deduplication, fallbacks and idempotent persistence.
How to model users, memberships, roles, active tenant context and authorization boundaries in a multi-company SaaS without leaking data across tenants.
How to prevent duplicate scheduled work across multiple application instances with PostgreSQL advisory locks, non-blocking acquisition, freshness checks and idempotent job design.