The Powerduck Blog
Product updates, engineering notes, and guides for designing, debugging, testing, mocking, and serving MCP tools from one OpenAPI spec.
Browse the guidesQuick answer: Protecting private API documentation requires an authentication layer that identifies the user and an authorization layer that decides what they may see. A hosted developer portal bundles identity,
Read articleQuick answer: When you reorganize documentation, old URLs break unless you add redirects and audit links. A hosted docs platform usually gives you a redirect configuration file and a built-in
Read articleQuick answer: Insomnia uses Nunjucks template tags to inject dynamic values like timestamps, random IDs, or variables into request fields. They are powerful for ad hoc dynamic requests, but the
Read articleQuick answer: A collection runner loop can generate repeated requests and give you rough latency numbers, but it is not a true load generator because it usually runs requests serially
Read articleQuick answer: Serving an MCP server on your own domain keeps the endpoint under your DNS, TLS, and branding, and removes a dependency on a registry's host. A
Read articleQuick answer: When an MCP connection drops in the middle of a workflow, the safest behavior is to stop, verify what already happened, and then resume rather than blindly replaying
Read articleQuick answer: A cloud monitor is just a scheduled collection run on someone else's runner, with a notification attached. You can replace it with a scheduled spec-driven CLI
Read articleQuick answer: A generated client that treats every response as a string will corrupt binary files like PDFs, images, and archives, because decoding raw bytes through a text codec mangles
Read articleQuick answer: MCP tool annotations let a server declare whether a tool is read-only, destructive, idempotent, or open-world, so an agent can decide whether to call it freely or ask
Read articleQuick answer: When a test calls an async function without await, the assertions run before the request resolves, so they check stale or empty state. The failure often looks like
Read articleQuick answer: A circuit breaker is a state machine with three states: closed, open, and half-open. When the downstream dependency fails enough times, the breaker opens and the client gets
Read articleQuick answer: A 406 Not Acceptable means the server cannot produce a response that matches the Accept header your client sent. It is not an auth problem and not a
Read article