Jul 11, 2026

A rotation policy question pulled a thread that unravelled into the whole design: certificate-based client credentials, the resource/client split, and …

Jul 8, 2026

A Practical Guide to .http Files - Ditch Postman, Keep Your API Calls in Source Control If you’ve spent any time bouncing between a browser tab, …

Jul 7, 2026

Stop shipping plaintext secrets. Encrypt your .env, commit it safely, and let one key unlock it at runtime. As developers, we’ve largely …

Jun 25, 2026

Azure Functions can be a pragmatic way to expose narrow, auditable MCP tools to agents without inventing a new hosting platform. This post explains …

Dec 18, 2025

How I built a cross-platform CLI tool in 1 hour to eliminate the frustration and security risks of manually managing Entra ID access tokens across …