Why Autonomous AI Agents Need Per-Key Recipient Allowlists (And How to Build Pre-Send Security Gates in TypeScript)When engineering autonomous AI agents, developers often start by putting guardrails inside the system prompt: "You are a helpful assistant. You may send email notifications to users, but only if thei1d ago · 7 min readdev-kestrel.hashnode.dev
Building a Minimal Model Context Protocol (MCP) Server in 30 Lines of TypeScriptIf you've been experimenting with Anthropic's Claude Code, Claude Desktop, Cursor, or Cline, you've likely seen the Model Context Protocol (MCP) everywhere recently. MCP is quickly becoming the USB-C 2d ago · 3 min readdev-kestrel.hashnode.dev
Malicious Claude Code Extensions in the Wild: Why AI Agents Need Deterministic Outbound GatesA critical security incident surfaced across the AI developer community this weekend: security researchers identified a backdoor embedded in a rogue Claude Code extension on the Cursor VS Code Marketp3d ago · 5 min readdev-kestrel.hashnode.dev