MCP authorization decides what context agents see
MCP authorization became a context control plane in 2026. RFC 8707 token scoping decides which sources an agent can ever pull into its own context window.
Further reading
15 articles from the Wire blog, sorted newest first. Return to the MCP Server definition for context.
MCP authorization became a context control plane in 2026. RFC 8707 token scoping decides which sources an agent can ever pull into its own context window.
The 2026 MCP release candidate goes stateless: no initialize handshake, no session ID, any server instance answers any request. What stateless MCP means.
MCP Tasks let a server return a durable handle instead of a blocking result, keeping a long-running tool call's interim state off the agent's context window.
Connecting an MCP server is easy. Getting an agent to call its tools on the first relevant turn is where teams lose, and the cause is context.
OX Security's April 2026 advisory traces 14 MCP CVEs and 200,000 exposed servers to a single design choice: STDIO as the default local transport.
GitHub's MCP costs tens of thousands of tokens before any work begins. We compare MCP, Claude Skills, and CLI by context cost, not by user preference.
A 26M-parameter model just matched Gemini at function calling. Here is what Needle's distillation result means for MCP and agent context engineering.
Every MCP discussion is about tools. The protocol's resources primitive is how you load context without paying for it every turn. Here's how to use it.
Preloading every MCP tool into an agent's context is the bottleneck of 2026. Progressive tool loading defers definitions until needed and saves tokens.
The MCP 2026 roadmap reframes Model Context Protocol as enterprise context infrastructure: stateless transport, MCP Apps SEP-1865, audit logs, SSO auth.
Tool poisoning hides instructions inside MCP tool descriptions the agent reads as trusted context. The MCPTox benchmark recorded a 72.8% attack success rate.
We restructured Wire's MCP surface from 2 overloaded tools to 3 single-purpose ones. The counterintuitive result: adding a tool cut total calls 24%.
New research analyzed 3,282 MCP bug reports across GitHub. The patterns reveal a context delivery problem, not a protocol problem. Here's what it means.
From copy-paste to context platforms, five approaches to giving AI access to your data. Covers security trade-offs, cost, and practical recommendations.
Over 17,000 MCP servers exist but most are generic dev tools. Here's how to create a custom one for your own data without writing a single line of code.
Create your first context container and connect it to your AI tools in minutes.
Create Your First Container