Configuring MCP servers correctly — the parts that bite
The two-part declaration people get half right, why an API key is not an MCP credential, and where secrets should live so a prompt injection cannot read them.

Using AI tooling in a delivery pipeline without pretending it is magic — Claude, MCP, and OpenShift AI.
5 posts
The two-part declaration people get half right, why an API key is not an MCP credential, and where secrets should live so a prompt injection cannot read them.
Where an LLM helps a delivery pipeline, where it is the wrong tool, and the four architectural choices that decide which of those two you end up with.
Project context, permission boundaries, hooks and subagents — the configuration that decides whether agentic coding helps a platform team or generates work for it.
Building an eval set that catches regressions, where LLM-as-judge is trustworthy and where it is not, and how to run it in CI without constant flakiness.
Prompt caching, model tiering, batching and effort control: four levers that cut spend on an LLM feature, in the order that returns most for least risk.