maharshi365

4 ms·

1. 1.▲
   by maharshi365 17d ago

   i think standards are good for low level things. APIs change, model behvaiors change, we basically are allowing an external service provider to control our agent prompts.
2. 2.▲
   by maharshi365 17d ago

   1. Control can be done via CLIs --> api key based access controls. We have been doing it forever. 2. I think this really only applies to Oauth based MCPs. Many server support api key based auth, stored as files --> security is still
3. 3.▲
   by maharshi365 17d ago

   Were in a world where agents are more autonomous. Need stuff to be easier for agents and not humans
4. 4.▲
   by maharshi365 17d ago

   Yeah I think a better header is good. The idea isnt bad in concept.
5. 5.▲
   by maharshi365 17d ago

   In my experience they are very good at figuring out the apis. Well designed clis matter here but I've been able to give llms clis and its been pretty good.
6. 6.▲
   by maharshi365 17d ago

   I've been thinking about this. Technically mcp auth is also not secure, the keys are in env or in file and accessible to the agent. I think something like infiscial ai proxy could be useful here. Never store the creds on device.
7. 7.▲
   MCP was always a bad idea?(maharship.com)

   312 points by maharshi365 18d ago|294 comments