Topic
Agents write PR descriptions that read like git log --oneline. That's not what a reviewer needs. The cheapest review signal is one sentence on blast radius, and agents almost never volunteer it.
Read articleAn agent that exits 0 is not an agent that did the thing. It just means whatever it ran didn't blow up. Here's the cheap verification gate I stopped skipping.
Read articleShared stdio MCP configs look convenient until someone on the team leaves. The right model is per-teammate credentials, not one shared URL everyone pastes into Cursor.
Read articleWe hand-maintained a tools.json that matched our OpenAPI doc for about three weeks. Then someone renamed a parameter and the agent started sending the old name to an endpoint that no longer accepted it. The fix was not better discipline. It was letting the spec be the source of truth.
Read articleThe agent solved a small data-munging task by writing a 40-line Python script. Two months later, nobody on the team remembers how to run it, and it is the only thing that produces that CSV.
Read articlestdio means every engineer, every CI run, and every teammate's laptop spawns a Node process. A hosted HTTPS MCP URL means one config block, one process, one place to debug.
Read articlePasting a production bearer token into ~/.cursor/mcp.json means every engineer's laptop holds a credential that can call your billing API directly. The gateway should inject it; the agent client should never see it.
Read articleWhen you convert an entire OpenAPI doc into MCP tools, the agent sees 87 endpoints including the one that deletes a tenant. Per-operation exposure is the blast-radius control you actually want.
Read articleConverting an OpenAPI doc into an MCP server is easy. Keeping that Node process alive, rotated, and reachable from every engineer's laptop is the part that quietly becomes a second job.
Read articleAn agent wraps a flaky HTTP call in a retry loop. It retries on every non-2xx. The auth token expired on day two, and the loop retried 30 times per request for the next three weeks.
Read articleAn agent converts an if/else chain to a lookup map for cleanliness. TypeScript is green, tests pass, but one branch's logging and metrics call quietly disappears.
Read articleAn agent 'modernized' a sync function by marking it async. TypeScript was happy. The production caller that destructured the return value synchronously started crashing at runtime.
Read article