7 articles tagged
Vercel's 21 August 2026 changelog says every v0 connection mints a short-lived token with no long-lived secret to rotate. Its own Connect docs describe two connector types that store exactly that.
Cloudflare let developers decline optional OAuth scopes for Wrangler and its API MCP server on 22 August 2026. The wrangler login reference, dated 19 August, still says it takes every scope.
OAuth 2.1 removes the local proxy from AWS MCP Server setups. It also removes per-call AWS profile switching, which is the one feature consultancies working across client accounts actually rely on.
On 20 August 2026 Cloudflare let users deselect optional scopes at consent. RFC 6749 has permitted narrower grants since 2012, and most OAuth clients still assume the full requested set was approved.
GoDaddy, Cloudflare and AWS now all register domains over an API, and coding agents can call them. The three purchase contracts differ in ways that decide whether a retry costs you nothing or charges you twice.
Push Security tracks 25-plus device-code phishing kits and a 37.5x rise in phishing pages by April 2026. Passkeys do not help. Here are the settings that do, per platform.
MCP connects AI agents to your internal systems, and 78% of enterprise teams already run it. But 43% of public servers had command-injection flaws. What a production-grade custom MCP server needs in 2026, and how
