Blog Archives

The MCP spec added OAuth 2.1 authorization requirements on July 28, 2026. I started building against it four days later. Almost nobody implements it correctly yet, so I built the missing piece, a Go authorization middleware for MCP servers, layered on top of a JWT library I'd already built from scratch.

I built a multi-issuer JWT validation service from scratch in Go. Not because I needed to, production libraries exist for this. Because I wanted to understand what Spring Security was actually doing under the hood, and Go forced me to find out.

I used public asteroid data, some hand-built assumptions, and a small ML pipeline to model a speculative value target, and in the process realized I wanted a much deeper understanding of the science underneath it.

I wanted to understand how orbits actually work, so I started building a small 2D gravity simulator in Python.