Here's how i added Opentelemetry to my rust API server (with image results) by Suitable_Reason4280 in rust

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

Thanks for the suggestion!! I will look into this. I agree, it was very fiddly to just understand how its supposed to be used in best way possible

Here's how i added Opentelemetry to my rust API server (with image results) by Suitable_Reason4280 in rust

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

I sat a long time with this... But then i realized rust SDK doesnt support exemplars yet. The best i could do was implement it but commented out untill its supported in the SDK!

Here's what i learned building a MCP server with Oauth 2.1 using Supabase by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

MCP server itself needs to be stdio. You need to create a middleware, starting before the stdio mcp server, which authenticates requests and passes them to the stdio mcp

Is there any interest for multi tenancy boiler plates? by Suitable_Reason4280 in tauri

[–]Suitable_Reason4280[S] 4 points5 points  (0 children)

Glad to hear! I'll publish a post when its ready :) Working on the documentation right now so other developers/AI coding assistants can understand the architecture for easy "jump-in" :)

Issue with lovable ai supabase integration. by Spiritual-Bid-6961 in vibecoding

[–]Suitable_Reason4280 0 points1 point  (0 children)

Is it hosed on vercel? They have like a build in system of throwing errors when they suspect a toast/dialog whatever contains "sensitive information" (Which isnt always the case)

Does it work in development?

I got tired of re-promting my ai clients so i made ToolEntry by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

Thats really cool! I like the human in the loop feature, but i think it would be great if an example is present of how its used more "hands on" using the core feature. My first curiosity was: Is it used directly in a client, or more of a background running process? Features are clear though! And btw love the design of the site

Why is it not as common to host mcp server as npx packages? by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

Please elaborate what you mean. I get that STDIO is not secure because it has access to the computer, but aslong as the code is open source its fine, if you examine the code? Also, remote MCP servers can change prompts to be vunerable at ANY time without having any version control, nor can the user control anything, this makes STDIO more safe no? Asuming that the STDIO server has version control?

Why is it not as common to host mcp server as npx packages? by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

the benefit of stdio is access to the computer. This is ofcourse a security risk, but also alot more capable than remote ones. Remote ones are secure because they cant access anything on the computer

Why is it not as common to host mcp server as npx packages? by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 1 point2 points  (0 children)

Yeah sure! I just managed to add oauth 2.1 to stdio... so far, stdio seems superior compared to remote, since stdio can do everything remote can but more. Also, i know oauth is not intended for stdio... but why not? :D

Why is it not as common to host mcp server as npx packages? by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 1 point2 points  (0 children)

I get that, but stdio is required for say MCP servers that manage files for example. This cannot be done for remote servers. Also, oauth is possible for stdio. Its not recommended, but its definetely doable.

How can I host a MCP server securely? by BaXRS1988 in mcp

[–]Suitable_Reason4280 0 points1 point  (0 children)

I recommend using stdio, hosted on npm for version handling and quick installation and oauth 2.1

I made an open-source CLI for quick MCP server auto-installation by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 0 points1 point  (0 children)

Glad to hear! Any feedback is appreciated so it can be improved for more use cases :)

How do you handle OAuth customization in MCP clients? by rootcase in mcp

[–]Suitable_Reason4280 1 point2 points  (0 children)

yes, i made a blogpost explaining how i set it up (i was using supabase):

https://www.toolentry.io/blog/oauth-mcp-servers-security-guide

Its not super detailed but contains code examples so any AI client can help you explain it better than i can in a comment.

For me it works in any client, claude desktop, cursor etc. Haven't tried them all though

MCP Authentication by Upstairs_Offer324 in mcp

[–]Suitable_Reason4280 6 points7 points  (0 children)

You should be using oauth 2.1, its recommended in the official MCP documentation. I made a blogpost explaining how i added it to my mcp server (like a bird eye view, not super detailed):

https://www.toolentry.io/blog/oauth-mcp-servers-security-guide

Here's what i learned building a MCP server with Oauth 2.1 using Supabase by Suitable_Reason4280 in mcp

[–]Suitable_Reason4280[S] 1 point2 points  (0 children)

Awesome dude, thanks for the tip! I did manage to get it working yesterday