Don't mind me, just reverse-engineering my way to playable Hunters in Halo: Campaign Evolved.
Den Delimarsky
@den.dev
Member of Technical Staff at @anthropic.com • Lead Maintainer of Model Context Protocol
We are so back 💪 @simonwillison.net - if you have any feedback, all ears. Happy to make sure that the new spec and specs beyond it work well for devs.
The new stateless MCP specification has rekindled my interest in MCP, and inspired some new projects, including mcp-explorer and datasette-mcp simonwillison.net/2026/Jul/31/...
OMG, so I discovered secret machinima controls in Halo: Campaign Evolved, and by proxy learned that all this time I was playing as a half-body ghost?
The new MCP spec is now officially in flight 🛫 2026-07-28 is here, with a fully stateless protocol dsc.ai/new-mcp
How is Bluesky STILL relying on emails for 2FA in 2026? Yubikeys and authenticator apps have been invented, right? I didn't dream it up?
Brand new MCP SDKs just dropped for those of you who are brave enough to be on beta branches to test the new spec ✨ dsc.ai/sdk-betas
It's nice to see how in the past week alone ID-JAG picked up so much community traction. Who knew - people don't like to be annoyed by unnecessary auth prompts.
Plugged @standard.site integration for my blog and it's been a delight!
MCP Apps And Interactive UIs In MCP Clients
MCP Apps adds an official extension for rendering interactive UIs inside MCP clients, building on MCP-UI and OpenAI's Apps work to move beyond plain text.
den.dev
More people need to get comfortable with doing multi-agent adversarial analysis on their code.
I'm not kidding, Enterprise Managed Auth is probably the one thing that I am most excited about in the auth space this year. One SSO auth into Claude and you're logged into a bunch of other MCP servers automatically. Magic. You can sign your org up 👉 dsc.ai/emaw
very cool. here’s the link. it covers over a big sharp edge in authentication and makes MCP far more accessible to broad enterprise use blog.modelcontextprotocol.io/posts/enterp...
Enterprise-Managed Authorization: Zero-touch OAuth for MCP
The Enterprise-Managed Authorization extension to the Model Context Protocol is now stable, enabling organizations to centrally provision MCP server access through their identity provider so users get...
blog.modelcontextprotocol.io
Unreal. Our today's MCP announcement is top of HN right now.
I am getting tired of overpermissioned tokens floating around, so the new MCP spec will be better for those that like step-up auth.
Part of the reason the default in the spec now is recommending CIMD - one client, basically determined by DNS.
Great point about "cleaning up after yourself" being an imporant consideration if you allow MCP clients to register willy-nilly on your authorization server.
TIL recently, the client credentials flow is now part of the MCP specification (as an extension). This lets agents egage directly with an MCP server, rather than always acting on-behalf-of a human users. Check it out here: modelcontextprotocol.io/extensions/a... Any #mcp devs implement this?
OAuth Client Credentials - Model Context Protocol
Machine-to-machine authentication for MCP using the OAuth 2.0 client credentials flow
modelcontextprotocol.io
I'm on a mission to make Claude the best MCP client. Diving deep into every MCP issue in our public repos. Having MCP problems with Anthropic products? File here: ✨ github.com/anthropics/c... ✨ github.com/anthropics/c... Blocked or no response? Tag me, we'll fix it.
GitHub MCP is really good if you want GitHub functionality on the go. If you have a local environment, use the CLI.
which, on that note, I've found `gh` to beat the GitHub MCP
Hear. Actively working with the team on fixing it and making Claude the best client for MCP. You might see me actively and aggressively triage all inbound GitHub issues for Claude MCP integration you all submit.
All of this nuance that makes MCP elegant? barely supported. Fucking Claude.ai only supports tools, ignores MCP connection messages that would provide helpful context for learning the MCP’s shape so the center of gravity is just to make shitty CRUD layers instead of genuine robot interfaces pmo
Folks also often miss the fact that CLIs are perfectly fine if you have an unrestricted local environment. What happens when I want to do something from my phone or a corporate machine that requires data exfil controls and fine-grained AuthZ?
I think this is functionally true not because MCP is bad but because most implementations are “CLI but worse” MCP is actually an interaction design problem but most people are treating it as… not that
Truly excellent work from Anthropic. I think this is a promising interpretability technique, but what I really like is that they’ve made code available for open weight models.
Natural Language Autoencoders
Turning Claude's thoughts into text
anthropic.com
Gotta be honest. It is really cool to see SPIFFE catching on. It’s been a long journey but it is great when people get it.
Wow! SPIFFE is becoming mainstream, finally. Well done, @anthropic.com. @h.olysh.it is proud.
More MCP goodness 🎉
I knew Figma had an MCP but now I can also connect to FigJam and CREATE boards 🤯 - made a figjam for a workshop using Copilot CLI in like 5 minutes (and it was branded and pretty because of my instructions files). And then after the workshop, used it again and made a write up SO FAST. #ux #design
i feel like my job as an engineer has always been asking questions like "how" and "why". it wasn't really "write code". sure, the latter was the "how" very often, but that was simply because at one point that _was_ the only "how" that was available