Blog

Engineering notes from fold — federation, governance, and what a stateless protocol does to the thing in the middle.

2026-08-10 · engineering
One bucket, not ten: tenancy in an MCP gateway
A tenant groups principals and governs them as one. The line the design holds above all is that it never authenticates them. Budgets charge narrowest-first, rate limits check widest-first, and ambiguity is refused rather than resolved.
2026-08-04 · engineering
Federating MCP tasks: affinity routing over opaque ids
The MCP tasks extension standardized long-running work — and task ids outlive any session. Putting one gateway in front of N task-running servers forces an ownership problem, and the solution generalizes.

Start where it hurts.

A single passthrough upstream in front of your most-used server is one config file away. Governance grows from there.