# HTTP

HTTP (Hypertext Transfer Protocol) is a stateless application-level protocol for distributed hypertext information systems.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Ktor 3.6.0 Is Now Available!

DevFeed: [Ktor 3.6.0 Is Now Available!](<https://devfeed.tech/articles/ktor-3-6-0-is-now-available-42785.md>)

Original publisher: [Read original article](<https://blog.jetbrains.com/ktor/2026/09/18/ktor-3-6-0-is-now-available/>)

Author: Simon Vergauwen

Published: 2026-09-18T10:45:56Z

Content type: release

Language: en

Sources: [The JetBrains Blog](<https://devfeed.tech/sources/the-jetbrains-blog.md>)

Topics: [Ktor](<https://devfeed.tech/topics/ktor.md>), [Kotlin](<https://devfeed.tech/topics/kotlin.md>), [Netty](<https://devfeed.tech/topics/netty.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [openid](<https://devfeed.tech/topics/openid.md>), [multiplatform](<https://devfeed.tech/topics/multiplatform.md>), [clients](<https://devfeed.tech/topics/clients.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>)

Tags: [authentication](<https://devfeed.tech/tags/authentication.md>), [clients](<https://devfeed.tech/tags/clients.md>), [http](<https://devfeed.tech/tags/http.md>), [http-3](<https://devfeed.tech/tags/http-3.md>), [kotlin](<https://devfeed.tech/tags/kotlin.md>), [kotlin-multiplatform](<https://devfeed.tech/tags/kotlin-multiplatform.md>), [ktor](<https://devfeed.tech/tags/ktor.md>), [news](<https://devfeed.tech/tags/news.md>), [openid](<https://devfeed.tech/tags/openid.md>), [quic](<https://devfeed.tech/tags/quic.md>), [release](<https://devfeed.tech/tags/release.md>), [releases](<https://devfeed.tech/tags/releases.md>), [routing](<https://devfeed.tech/tags/routing.md>), [server](<https://devfeed.tech/tags/server.md>)

### AI overview

Ktor 3.6.0 introduces experimental typed authentication with OpenID Connect support and HTTP/3 over QUIC for the Netty engine. The release also improves routing, request handling, and Kotlin Multiplatform client defaults.

### Source excerpt

Ktor 3.6.0 is here! This release is full of new experimental features, including typed authentication capabilities with specialized support for OpenID Connect and HTTP/3 support for the Netty engine. There are also a few quality-of-life improvements for routing and request handling, more convenient defaults for Kotlin Multiplatform clients, and more. Check out What's new in [...]

## В "Архиве Интернета" из-за наплыва ботов могут блокировать и обычных пользователей

DevFeed: [В "Архиве Интернета" из-за наплыва ботов могут блокировать и обычных пользователей](<https://devfeed.tech/articles/article-41463.md>)

Original publisher: [Read original article](<https://habr.com/ru/news/1083466/>)

Author: Travis\_Macrif

Published: 2026-09-17T13:18:01Z

Content type: news

Language: ru

Sources: [Tagir Valeev](<https://devfeed.tech/sources/tagir-valeev.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Google](<https://devfeed.tech/topics/google.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [chatgpt](<https://devfeed.tech/tags/chatgpt.md>), [google](<https://devfeed.tech/tags/google.md>), [http](<https://devfeed.tech/tags/http.md>), [ip](<https://devfeed.tech/tags/ip.md>), [tag-53b4ba2afbf0](<https://devfeed.tech/tags/tag-53b4ba2afbf0.md>), [tag-7e87c89650ab](<https://devfeed.tech/tags/tag-7e87c89650ab.md>), [tag-8fcb6037885f](<https://devfeed.tech/tags/tag-8fcb6037885f.md>), [tag-92fc4f083c94](<https://devfeed.tech/tags/tag-92fc4f083c94.md>), [tag-9d8cf70dc46c](<https://devfeed.tech/tags/tag-9d8cf70dc46c.md>), [tag-bd7eab81747d](<https://devfeed.tech/tags/tag-bd7eab81747d.md>), [tag-d96e238f1419](<https://devfeed.tech/tags/tag-d96e238f1419.md>), [wayback-machine](<https://devfeed.tech/tags/wayback-machine.md>)

### AI overview

The Internet Archive deployed protections against automated and malicious bots targeting the Wayback Machine, but the measures have also blocked some legitimate users. The organization is trying to reduce false positives while combating large-scale data collection for AI model training.

### Source excerpt

Некоммерческая организация "Архив Интернета" развернула средства защиты онлайн-библиотеки Wayback Machine от автоматизированных и вредоносных ботов, что стало приводить к блокировке и обычных пользователей, пытающихся получить доступ к ресурсу. Читать далее

## JavaScript bundling and HTTP performance trade-offs

DevFeed: [JavaScript bundling and HTTP performance trade-offs](<https://devfeed.tech/articles/forgo-js-packaging-not-so-fast-27386.md>)

Original publisher: [Read original article](<http://engineering.khanacademy.org/posts/js-packaging-http2.htm>)

Author: Khan Academy

Published: 2015-11-23T23:00:00Z

Content type: article

Language: en

Sources: [Khan Academy](<https://devfeed.tech/sources/khan-academy.md>)

Topics: [JavaScript](<https://devfeed.tech/topics/javascript.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Caching](<https://devfeed.tech/topics/caching.md>), [browserify](<https://devfeed.tech/topics/browserify.md>), [Webpack](<https://devfeed.tech/topics/webpack.md>)

Tags: [browserify](<https://devfeed.tech/tags/browserify.md>), [cache](<https://devfeed.tech/tags/cache.md>), [engineering](<https://devfeed.tech/tags/engineering.md>), [http](<https://devfeed.tech/tags/http.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [js](<https://devfeed.tech/tags/js.md>), [news](<https://devfeed.tech/tags/news.md>), [webpack](<https://devfeed.tech/tags/webpack.md>)

### AI overview

The article examines trade-offs between bundling JavaScript files, serving them separately, and using semantically related bundles. It explains how these approaches balance HTTP request overhead, browser fetch limits, cacheability, and unused downloaded code.

### Source excerpt

By Craig Silverstein Bundling JavaScript files The traditional advice for web developers is to bundle the JavaScript files ... Read more

## MCP went stateless: What changed in the 2026-07-28 spec

DevFeed: [MCP went stateless: What changed in the 2026-07-28 spec](<https://devfeed.tech/articles/mcp-went-stateless-what-changed-in-the-2026-07-28-spec-31436.md>)

Original publisher: [Read original article](<https://workos.com/blog/mcp-stateless-spec-2026-07-28>)

Author: WorkOS

Published: 2026-09-16T00:00:00Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [migration](<https://devfeed.tech/topics/migration.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [servers](<https://devfeed.tech/topics/servers.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [client](<https://devfeed.tech/tags/client.md>), [http](<https://devfeed.tech/tags/http.md>), [load-balancer](<https://devfeed.tech/tags/load-balancer.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [replacement](<https://devfeed.tech/tags/replacement.md>), [request](<https://devfeed.tech/tags/request.md>), [routing](<https://devfeed.tech/tags/routing.md>), [server](<https://devfeed.tech/tags/server.md>), [servers](<https://devfeed.tech/tags/servers.md>), [sessions](<https://devfeed.tech/tags/sessions.md>), [stateless](<https://devfeed.tech/tags/stateless.md>), [stream](<https://devfeed.tech/tags/stream.md>)

### AI overview

The 2026-07-28 MCP specification removes protocol-level sessions, the initialize handshake, and stream resumability, making the protocol behave more like an ordinary HTTP API. Most migrations are mechanical, but lost stream requests can cause reliability regressions or duplicated side effects when retried, so side-effecting tools need application-level idempotency keys. The elicitation change also requires architectural rework.

### Source excerpt

Sessions, the initialize handshake, and stream resumability are all gone. Here is what replaced them, and what breaks if you ignore it.

## Patching This Site's MCP Endpoint and Limiting What It Can Do

DevFeed: [Patching This Site's MCP Endpoint and Limiting What It Can Do](<https://devfeed.tech/articles/patching-this-site-s-mcp-endpoint-and-limiting-what-it-can-do-30870.md>)

Original publisher: [Read original article](<https://brent.leekley.me/blog/mcp-patch-and-limits/>)

Author: Brent Leekley

Published: 2026-09-08T00:00:00Z

Content type: tutorial

Language: en

Sources: [brent.leekley.me blog](<https://devfeed.tech/sources/brent-leekley-me-blog.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [MCP Server](<https://devfeed.tech/topics/mcp-server.md>), [API](<https://devfeed.tech/topics/api.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [JSON](<https://devfeed.tech/topics/json.md>)

Tags: [aeo](<https://devfeed.tech/tags/aeo.md>), [agent-ready-website](<https://devfeed.tech/tags/agent-ready-website.md>), [agentic-ai](<https://devfeed.tech/tags/agentic-ai.md>), [agents](<https://devfeed.tech/tags/agents.md>), [api](<https://devfeed.tech/tags/api.md>), [api-security](<https://devfeed.tech/tags/api-security.md>), [clients](<https://devfeed.tech/tags/clients.md>), [json-rpc](<https://devfeed.tech/tags/json-rpc.md>), [logs](<https://devfeed.tech/tags/logs.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [prompt-injection](<https://devfeed.tech/tags/prompt-injection.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [rate-limiting](<https://devfeed.tech/tags/rate-limiting.md>), [retry](<https://devfeed.tech/tags/retry.md>), [server](<https://devfeed.tech/tags/server.md>), [streamable-http](<https://devfeed.tech/tags/streamable-http.md>), [webmcp](<https://devfeed.tech/tags/webmcp.md>)

### AI overview

This article explains how to patch a website's public, unauthenticated MCP endpoint. It covers updating to the current protocol revision while retaining compatibility with older clients, and applying limits including read-only tools, per-IP rate limiting, request-size caps, Origin checks, POST-only access, non-reflected strings, and privacy-preserving logs.

### Source excerpt

An MCP server on your website is a public, unauthenticated API. Bringing one to the current protocol revision while keeping older clients working, and the seven limits that bound it: read-only tools, a per-IP rate limit that always sends Retry-After, hard caps on body and argument size, an https-only Origin check, POST only, no reflected strings, and logs that store a salted hash instead of an address.

## The Evolution of HTTP, Clearly Explained

DevFeed: [The Evolution of HTTP, Clearly Explained](<https://devfeed.tech/articles/the-evolution-of-http-clearly-explained-18040.md>)

Original publisher: [Read original article](<https://blog.levelupcoding.com/p/the-evolution-of-http-clearly-explained>)

Author: Nikki Siapno

Published: 2026-09-04T16:39:02Z

Content type: article

Language: en

Sources: [Level Up Coding System Design Newsletter](<https://devfeed.tech/sources/level-up-coding-system-design-newsletter.md>)

Topics: [HTTP](<https://devfeed.tech/topics/http.md>), [client](<https://devfeed.tech/topics/client.md>), [servers](<https://devfeed.tech/topics/servers.md>), [Caching](<https://devfeed.tech/topics/caching.md>), [Web](<https://devfeed.tech/topics/web.md>)

Tags: [browser](<https://devfeed.tech/tags/browser.md>), [caching](<https://devfeed.tech/tags/caching.md>), [encoding](<https://devfeed.tech/tags/encoding.md>), [evolution](<https://devfeed.tech/tags/evolution.md>), [http](<https://devfeed.tech/tags/http.md>), [http-3](<https://devfeed.tech/tags/http-3.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [request](<https://devfeed.tech/tags/request.md>), [responses](<https://devfeed.tech/tags/responses.md>), [server](<https://devfeed.tech/tags/server.md>), [tcp](<https://devfeed.tech/tags/tcp.md>)

### AI overview

An explanatory article traces HTTP from versions 0.9 through 1.1, describing how headers, status codes, persistent connections, caching, and chunked transfer encoding addressed the web's growing scale and performance needs. It introduces HTTP/3 as part of that broader evolution.

### Source excerpt

From 0.9 to 3.0: What changed and why?

## Fixed window, sliding window, or token bucket? Choosing a rate limit strategy in Appwrite Firewall

DevFeed: [Fixed window, sliding window, or token bucket? Choosing a rate limit strategy in Appwrite Firewall](<https://devfeed.tech/articles/fixed-window-sliding-window-or-token-bucket-choosing-a-rate-limit-strategy-in-appwrite-firewall-16479.md>)

Original publisher: [Read original article](<https://appwrite.io/blog/post/firewall-rate-limit-strategies>)

Author: Atharva Deosthale

Published: 2026-09-04T00:00:00Z

Content type: tutorial

Language: en

Sources: [Appwrite Blog](<https://devfeed.tech/sources/appwrite-blog.md>)

Topics: [Appwrite](<https://devfeed.tech/topics/appwrite.md>), [Firewall](<https://devfeed.tech/topics/firewall.md>), [Algorithms](<https://devfeed.tech/topics/algorithms.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [client](<https://devfeed.tech/topics/client.md>)

Tags: [firewall](<https://devfeed.tech/tags/firewall.md>), [http](<https://devfeed.tech/tags/http.md>), [rate-limiting](<https://devfeed.tech/tags/rate-limiting.md>), [security](<https://devfeed.tech/tags/security.md>), [strategy](<https://devfeed.tech/tags/strategy.md>)

### AI overview

This article explains the fixed window, sliding window, and token bucket rate-limiting strategies supported by Appwrite Firewall. It compares how they handle bursts and time-window boundaries, describes IP- and User ID-based limits, and explains how to choose a strategy.

### Source excerpt

Appwrite Firewall rate limit rules support three strategies. Learn how fixed window, sliding window, and token bucket work, where each one breaks down, and how to pick the right one for your traffic.

## curl 8.22.0

DevFeed: [curl 8.22.0](<https://devfeed.tech/articles/curl-8-22-0-18904.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/09/02/curl-8-22-0/>)

Author: Daniel Stenberg

Published: 2026-09-02T05:52:46Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [Security](<https://devfeed.tech/topics/security.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [openssl](<https://devfeed.tech/topics/openssl.md>), [API](<https://devfeed.tech/topics/api.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [bugfixes](<https://devfeed.tech/tags/bugfixes.md>), [command-line](<https://devfeed.tech/tags/command-line.md>), [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [cve](<https://devfeed.tech/tags/cve.md>), [cves](<https://devfeed.tech/tags/cves.md>), [http](<https://devfeed.tech/tags/http.md>), [openssl](<https://devfeed.tech/tags/openssl.md>), [release](<https://devfeed.tech/tags/release.md>), [security](<https://devfeed.tech/tags/security.md>), [tls](<https://devfeed.tech/tags/tls.md>)

### AI overview

The curl 8.22.0 release includes six changes, 302 bug fixes, and nine curl/libcurl security fixes plus one wcurl fix. It adds Apple GSS Framework support, API guards, experimental HTTP Message Signatures support, and Apple fast UDP, while blocking NTLM fallback in SPNEGO and dropping TLS-SRP support.

### Source excerpt

Welcome to this new release. Get it as always from https://curl.se. If you rather want a security-patched older release branch, stay tuned for the follow-up Rock-solid curl announcement within a few days. Release presentation Numbers the 276th release6 changes70 days (total: 10,887)302 bugfixes (total: 14,489)525 commits (total: 39,608)0 new public libcurl function (total: 100)4 new ... Continue reading curl 8.22.0 ->

## Cypress 16: faster tests, starting with HTTP/2 support

DevFeed: [Cypress 16: faster tests, starting with HTTP/2 support](<https://devfeed.tech/articles/cypress-16-faster-tests-starting-with-http-2-support-12602.md>)

Original publisher: [Read original article](<https://www.cypress.io/blog/cypress-16-faster-tests-starting-with-http2-support/>)

Published: 2026-09-01T17:28:34Z

Content type: release

Language: en

Sources: [Cypress Blog](<https://devfeed.tech/sources/cypress-blog.md>)

Topics: [Cypress](<https://devfeed.tech/topics/cypress.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Chromium](<https://devfeed.tech/topics/chromium.md>), [Node.js](<https://devfeed.tech/topics/node-js.md>), [Streaming](<https://devfeed.tech/topics/streaming.md>), [Vite](<https://devfeed.tech/topics/vite.md>)

Tags: [chromium](<https://devfeed.tech/tags/chromium.md>), [ci](<https://devfeed.tech/tags/ci.md>), [cypress](<https://devfeed.tech/tags/cypress.md>), [http](<https://devfeed.tech/tags/http.md>), [node-js](<https://devfeed.tech/tags/node-js.md>), [streaming](<https://devfeed.tech/tags/streaming.md>), [tests](<https://devfeed.tech/tags/tests.md>), [vite](<https://devfeed.tech/tags/vite.md>)

### AI overview

Cypress 16 improves end-to-end test performance with HTTP/2 support, zero-delay typing, faster visibility checks, retrying cookie and storage commands, and automatic memory management. The release also updates Node.js, Electron, and Chromium versions and removes Cypress.env() as part of its security work.

### Source excerpt

Cypress 16 goes after slow test suites from every angle: HTTP/2 support, zero-delay typing, faster visibility checks, retrying cookie commands, and automatic memory management. Most of it arrives without editing a single test. Here's what changed, why, and how to upgrade.

## Classify Domain and System Errors to Set HTTP Status, Logging, and Paging

DevFeed: [Classify Domain and System Errors to Set HTTP Status, Logging, and Paging](<https://devfeed.tech/articles/stop-throwing-new-error-it-s-lying-to-your-logs-18109.md>)

Original publisher: [Read original article](<https://thetshaped.dev/p/domain-errors-are-features-system-errors-are-bugs-error-handling>)

Author: The T-Shaped Dev

Published: 2026-08-29T04:19:38Z

Content type: tutorial

Language: en

Sources: [The T-Shaped Dev](<https://devfeed.tech/sources/the-t-shaped-dev.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [code](<https://devfeed.tech/tags/code.md>), [errors](<https://devfeed.tech/tags/errors.md>), [graphql](<https://devfeed.tech/tags/graphql.md>), [http](<https://devfeed.tech/tags/http.md>), [logs](<https://devfeed.tech/tags/logs.md>), [middleware](<https://devfeed.tech/tags/middleware.md>), [on-call](<https://devfeed.tech/tags/on-call.md>)

### AI overview

This tutorial distinguishes expected domain errors, such as invalid input or forbidden actions, from unexpected system errors, such as database failures, upstream timeouts, and memory exhaustion. It proposes encoding the distinction in error types so middleware can determine the HTTP status, user message, log level, and paging behavior.

### Source excerpt

One distinction that sets your HTTP status, your log level, and who gets paged. (6 min)

## 【kube-apiserver】Watch 路径（服务端）：长连接、410 Gone 与 timeout

DevFeed: [【kube-apiserver】Watch 路径（服务端）：长连接、410 Gone 与 timeout](<https://devfeed.tech/articles/kube-apiserver-watch-410-gone-timeout-33963.md>)

Original publisher: [Read original article](<https://quant67.com/post/apiserver/07-watch-server/07-watch-server.html>)

Author: Liao Tonglang

Published: 2026-08-28T00:00:00Z

Content type: article

Language: zh

Sources: [土法炼钢 - 系统与基础设施](<https://devfeed.tech/sources/source-4.md>)

Topics: [Kubernetes](<https://devfeed.tech/topics/kubernetes.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [kubectl](<https://devfeed.tech/topics/kubectl.md>)

Tags: [410-gone](<https://devfeed.tech/tags/410-gone.md>), [apiserver](<https://devfeed.tech/tags/apiserver.md>), [bookmark](<https://devfeed.tech/tags/bookmark.md>), [cacher](<https://devfeed.tech/tags/cacher.md>), [distributed](<https://devfeed.tech/tags/distributed.md>), [etcd](<https://devfeed.tech/tags/etcd.md>), [etcd3](<https://devfeed.tech/tags/etcd3.md>), [informer](<https://devfeed.tech/tags/informer.md>), [kubernetes](<https://devfeed.tech/tags/kubernetes.md>), [resourceversion](<https://devfeed.tech/tags/resourceversion.md>), [rest](<https://devfeed.tech/tags/rest.md>), [timeout](<https://devfeed.tech/tags/timeout.md>), [v1-30-3](<https://devfeed.tech/tags/v1-30-3.md>), [watch](<https://devfeed.tech/tags/watch.md>)

### AI overview

This article explains the Kubernetes v1.30.3 apiserver Watch path, from the REST handler through cacher and etcd3 watchers. It distinguishes 410 Gone caused by cacher ring-buffer eviction from errors propagated from etcd compaction, and covers resourceVersion semantics, timeouts, bookmarks, connection lifecycle, and the boundary with client-go Informer.

### Source excerpt

钉 Kubernetes v1.30.3 服务端 Watch 路径：从 REST handler 到 cacher/etcd3 watcher 的建立过程、resourceVersion=0 与具体 RV 的语义差异、410 Gone 与 etcd ErrCompacted 的映射、bookmark 推送与连接生命周期，以及与 client-go Informer 的边界。

## Security Week 2635: вредоносное ПО в автомобильных Android-устройствах

DevFeed: [Security Week 2635: вредоносное ПО в автомобильных Android-устройствах](<https://devfeed.tech/articles/security-week-2635-android-23090.md>)

Original publisher: [Read original article](<https://habr.com/ru/companies/kaspersky/articles/1073832/>)

Author: Kaspersky\_Lab ("Лаборатория Касперского")

Published: 2026-08-25T08:00:25Z

Content type: news

Language: ru

Sources: ["Лаборатория Касперского" RU](<https://devfeed.tech/sources/ru-2.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [Android](<https://devfeed.tech/topics/android.md>), [APK](<https://devfeed.tech/topics/apk.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [WebView](<https://devfeed.tech/topics/webview.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [android](<https://devfeed.tech/tags/android.md>), [apk](<https://devfeed.tech/tags/apk.md>), [badbox](<https://devfeed.tech/tags/badbox.md>), [http](<https://devfeed.tech/tags/http.md>), [security](<https://devfeed.tech/tags/security.md>), [tag-9fe8963de219](<https://devfeed.tech/tags/tag-9fe8963de219.md>), [webview](<https://devfeed.tech/tags/webview.md>)

### AI overview

Kaspersky researchers discovered Android malware installed on DoFun automotive head units. The JarService dropper downloads a clicker for advertising banners and a reverse-proxy module, linking the campaign to attacks on Android TV set-top boxes and the BADBOX platform.

### Source excerpt

Исследователи "Лаборатории Касперского" обнаружили новый Android-зловред, уникальной особенностью которого является установка на головное устройство автомобиля. Вредоносное ПО использовало особенности головных устройств производителя DoFun, позволявшие устанавливать произвольные APK-файлы. Целью распространения вредоносного ПО являлось мошенничество с рекламными баннерами и использование автомобильной магнитолы в качестве прокси-сервера. Исследование кода выявило связи с другими атаками, нацеленными, например, на телеприставки под управлением Android. Расследование началось в июне 2026 года, когда специалисты "Лаборатории Касперского" обнаружили новый дроппер JarService. Зловред устанавливался как обычное пользовательское приложение и никак не маскировался под легитимное ПО. Точнее, у него полностью отсутствовал интерфейс, что указывало на возможность установки без ведома пользователя. Дроппер расшифровывает данные и запускает следующий этап атаки -- вредоносный загрузчик. Он, в свою очередь, отправляет информацию на командный сервер злоумышленников, скачивает оттуда и запускает финальную полезную нагрузку -- кликер на рекламные баннеры и реверс-прокси. Читать далее

## Choosing an HTTP Status for AI Agent Authorization Through Transparent Proxies

DevFeed: [Choosing an HTTP Status for AI Agent Authorization Through Transparent Proxies](<https://devfeed.tech/articles/how-to-tell-an-ai-agent-that-its-user-needs-to-authorize-15978.md>)

Original publisher: [Read original article](<https://workos.com/blog/402-not-401-ai-agents>)

Author: WorkOS

Published: 2026-08-11T00:00:00Z

Content type: tutorial

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [agents](<https://devfeed.tech/tags/agents.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [http](<https://devfeed.tech/tags/http.md>), [rest](<https://devfeed.tech/tags/rest.md>)

### AI overview

This article explains how a transparent proxy for AI agents should respond when a user has not connected a third-party API. It examines why 401 and 403 conflict with existing authentication and provider-response meanings, and discusses the proposed response shape and the x402 standard.

### Source excerpt

Your agent calls a third-party API for a user who never connected it. What to send back, why 401 and 403 are both already taken, and what the x402 standard means for the answer.

## SCIM Deprovisioning Is a Promise Your App Probably Breaks

DevFeed: [SCIM Deprovisioning Is a Promise Your App Probably Breaks](<https://devfeed.tech/articles/scim-deprovisioning-is-a-promise-your-app-probably-breaks-16056.md>)

Original publisher: [Read original article](<https://workos.com/blog/scim-deprovisioning-promise-your-app-breaks>)

Author: WorkOS

Published: 2026-08-06T01:29:36Z

Content type: article

Language: en

Sources: [WorkOS Blog](<https://devfeed.tech/sources/workos-blog.md>)

Topics: [Security](<https://devfeed.tech/topics/security.md>), [API](<https://devfeed.tech/topics/api.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Internet Engineering Task Force (IETF)](<https://devfeed.tech/topics/ietf.md>), [Protocol (disambiguation)](<https://devfeed.tech/topics/protocol.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [http](<https://devfeed.tech/tags/http.md>), [identity](<https://devfeed.tech/tags/identity.md>), [idp](<https://devfeed.tech/tags/idp.md>), [ietf](<https://devfeed.tech/tags/ietf.md>), [json](<https://devfeed.tech/tags/json.md>), [net-conf](<https://devfeed.tech/tags/net-conf.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [schema](<https://devfeed.tech/tags/schema.md>), [security](<https://devfeed.tech/tags/security.md>), [standards](<https://devfeed.tech/tags/standards.md>), [state](<https://devfeed.tech/tags/state.md>), [token](<https://devfeed.tech/tags/token.md>)

### AI overview

This article explains that SCIM deprovisioning updates identity state but does not automatically invalidate an application's sessions, refresh tokens, or API keys. It describes how identity providers commonly use soft deactivation and why applications must explicitly handle the resulting offboarding state.

### Source excerpt

SCIM tells you a user is gone, but sessions, refresh tokens, and API keys often outlive deprovisioning. Here's why offboarding needs more than a user row.

## Webinar Recap: Giving AI agents a native way to pay with x402

DevFeed: [Webinar Recap: Giving AI agents a native way to pay with x402](<https://devfeed.tech/articles/webinar-recap-giving-ai-agents-a-native-way-to-pay-with-x402-17256.md>)

Original publisher: [Read original article](<https://solana.com/news/webinar-recap-agentic-payments>)

Author: Solana Foundation

Published: 2026-08-05T18:55:00Z

Content type: article

Language: en

Sources: [Solana News Feed](<https://devfeed.tech/sources/solana-news-feed.md>)

Topics: [Solana](<https://devfeed.tech/topics/solana.md>), [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [Transactions](<https://devfeed.tech/topics/transactions.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [API](<https://devfeed.tech/topics/api.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-agents](<https://devfeed.tech/tags/ai-agents.md>), [api](<https://devfeed.tech/tags/api.md>), [blockchain](<https://devfeed.tech/tags/blockchain.md>), [blockchain-technology](<https://devfeed.tech/tags/blockchain-technology.md>), [crypto-news](<https://devfeed.tech/tags/crypto-news.md>), [cryptocurrency](<https://devfeed.tech/tags/cryptocurrency.md>), [defi](<https://devfeed.tech/tags/defi.md>), [developers](<https://devfeed.tech/tags/developers.md>), [http](<https://devfeed.tech/tags/http.md>), [nfts](<https://devfeed.tech/tags/nfts.md>), [payments](<https://devfeed.tech/tags/payments.md>), [podcasts](<https://devfeed.tech/tags/podcasts.md>), [recap](<https://devfeed.tech/tags/recap.md>), [solana](<https://devfeed.tech/tags/solana.md>), [solana-ecosystem](<https://devfeed.tech/tags/solana-ecosystem.md>), [stablecoins](<https://devfeed.tech/tags/stablecoins.md>), [transactions](<https://devfeed.tech/tags/transactions.md>), [web3](<https://devfeed.tech/tags/web3.md>)

### AI overview

The article recaps a webinar about x402, a protocol that uses HTTP 402 and stablecoins to let AI agents discover, pay for, and access web resources without human-managed accounts or API keys. It describes use cases including micropayments, budget-aware purchasing, and autonomous earning and spending.

### Source excerpt

X402 has processed roughly 200M transactions and $50B in volume, giving AI agents a stablecoin-native way to pay for web resources.

## Stateless MCP has recaptured my interest (and inspired mcp-explorer and datasette-mcp)

DevFeed: [Stateless MCP has recaptured my interest (and inspired mcp-explorer and datasette-mcp)](<https://devfeed.tech/articles/stateless-mcp-has-recaptured-my-interest-and-inspired-mcp-explorer-and-datasette-mcp-30505.md>)

Original publisher: [Read original article](<https://simonwillison.net/2026/Jul/31/stateless-mcp/>)

Author: Simon Willison

Published: 2026-07-31T23:13:22Z

Content type: article

Language: en

Sources: [Simon Willison](<https://devfeed.tech/sources/simon-willison.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [Large Language Model](<https://devfeed.tech/topics/llm.md>), [anthropic](<https://devfeed.tech/topics/anthropic.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Python](<https://devfeed.tech/topics/python.md>), [web applications](<https://devfeed.tech/topics/web-applications.md>)

Tags: [2026](<https://devfeed.tech/tags/2026.md>), [agent](<https://devfeed.tech/tags/agent.md>), [ai](<https://devfeed.tech/tags/ai.md>), [ai-2-235](<https://devfeed.tech/tags/ai-2-235.md>), [anthropic](<https://devfeed.tech/tags/anthropic.md>), [anthropic-336](<https://devfeed.tech/tags/anthropic-336.md>), [cli](<https://devfeed.tech/tags/cli.md>), [codex](<https://devfeed.tech/tags/codex.md>), [context](<https://devfeed.tech/tags/context.md>), [curl](<https://devfeed.tech/tags/curl.md>), [datasette](<https://devfeed.tech/tags/datasette.md>), [datasette-1-542](<https://devfeed.tech/tags/datasette-1-542.md>), [generative-ai](<https://devfeed.tech/tags/generative-ai.md>), [generative-ai-1-981](<https://devfeed.tech/tags/generative-ai-1-981.md>), [http](<https://devfeed.tech/tags/http.md>), [json](<https://devfeed.tech/tags/json.md>), [llm](<https://devfeed.tech/tags/llm.md>), [llm-631](<https://devfeed.tech/tags/llm-631.md>), [llms](<https://devfeed.tech/tags/llms.md>), [llms-1-947](<https://devfeed.tech/tags/llms-1-947.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mermaid](<https://devfeed.tech/tags/mermaid.md>), [mermaid-5](<https://devfeed.tech/tags/mermaid-5.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [model-context-protocol-35](<https://devfeed.tech/tags/model-context-protocol-35.md>), [projects](<https://devfeed.tech/tags/projects.md>), [projects-553](<https://devfeed.tech/tags/projects-553.md>), [shell](<https://devfeed.tech/tags/shell.md>), [stateless](<https://devfeed.tech/tags/stateless.md>), [terminal](<https://devfeed.tech/tags/terminal.md>)

### AI overview

This commentary examines the 2026-07-28 stateless Model Context Protocol specification. It argues that stateless MCP simplifies client and server implementation, improves auditability and control compared with shell-based agent access, and better supports scalable web applications by removing session state and session-affinity requirements. The article also introduces the mcp-explorer CLI tool and mentions datasette-mcp.

### Source excerpt

Tuesday was Stateless MCP day - the rollout of MCP 2.0, or the 2026-07-28 Model Context Protocol specification to use the more formal but less memorable name. This is the most significant change to the MCP spec since it first launched, and has also served to reignite my personal interest in the protocol. For background: MCP is the Model Context Protocol, which describes a standard way to expose new tools to LLM-powered agent frameworks. It was introduced by Anthropic back in November 2024, had a huge spike of interest through much of 2025, and then became somewhat eclipsed by Skills (another Anthropic invention) when it became apparent that an agent harness with access to a terminal and curl could do most of what MCP did in a more flexible way. I wrote about that in my review of 2025. I'm coming back around to MCP now. Giving an agent a shell environment with the ability to access the internet is fraught with risk, and requires a strong model that is capable of effectively driving such an environment. MCP tools are easier to audit and control, and simple enough that smaller models that run on a laptop can still drive them reasonably well. The new stateless MCP specification also greatly decreases the complexity of implementing both clients and servers for the protocol. I built three of those this week! What's easier with stateless MCP The best demonstration of the difference between stateful and stateless MCP is in this May 21st blog post that introduced the RC for the new specification. It included a clear before-and-after example. The older stateful MCP (I'm going to call it "legacy MCP") required two HTTP requests - the first to initialize a session and obtain a Mcp-Session-Id, and the second to actually call the tool: POST /mcp HTTP/1.1 Content-Type: application/json { "jsonrpc": "2.0", "id": 1, "method": "initialize", "params": { "protocolVersion": "2025-11-25", "capabilities": { }, "clientInfo": { "name": "my-app", "version": "1.0" } } } POST /mcp HTTP/1.1 Mcp

## What's new in the MCP 2026-07-28 specification

DevFeed: [What's new in the MCP 2026-07-28 specification](<https://devfeed.tech/articles/what-s-new-in-the-mcp-2026-07-28-specification-16494.md>)

Original publisher: [Read original article](<https://appwrite.io/blog/post/mcp-goes-stateless-in-the-2026-07-28-specification>)

Author: Aditya Oberai

Published: 2026-07-30T00:00:00Z

Content type: tutorial

Language: en

Sources: [Appwrite Blog](<https://devfeed.tech/sources/appwrite-blog.md>)

Topics: [Model Context Protocol](<https://devfeed.tech/topics/model-context-protocol.md>), [MCP Server](<https://devfeed.tech/topics/mcp-server.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [Caching](<https://devfeed.tech/topics/caching.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [Remote Procedure Call (RPC)](<https://devfeed.tech/topics/rpc.md>)

Tags: [caching](<https://devfeed.tech/tags/caching.md>), [http](<https://devfeed.tech/tags/http.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [news](<https://devfeed.tech/tags/news.md>), [routing](<https://devfeed.tech/tags/routing.md>), [rpc](<https://devfeed.tech/tags/rpc.md>)

### AI overview

The article explains changes in the MCP 2026-07-28 specification, focusing on the move from stateful sessions to a stateless request/response core. It covers implications for routing, load balancing, caching, authorization, and server migration.

### Source excerpt

The MCP 2026-07-28 spec drops sessions, adds header based routing, cacheable lists, and MRTR. Here is what changed and what you need to migrate your servers.

## HTTP QUERY: the method that was missing between GET and POST

DevFeed: [HTTP QUERY: the method that was missing between GET and POST](<https://devfeed.tech/articles/http-query-the-method-that-was-missing-between-get-and-post-17866.md>)

Original publisher: [Read original article](<https://www.codemotion.com/magazine/backend/http-query-the-method-that-was-missing-between-get-and-post/>)

Author: Matteo Baccan

Published: 2026-07-29T12:26:29Z

Content type: article

Language: en

Sources: [Backend Job: skill, salary and insights - Codemotion Magazine](<https://devfeed.tech/sources/backend-job-skill-salary-and-insights-codemotion-magazine.md>)

Topics: [HTTP](<https://devfeed.tech/topics/http.md>), [Back end](<https://devfeed.tech/topics/backend.md>), [Web](<https://devfeed.tech/topics/web.md>), [Security](<https://devfeed.tech/topics/security.md>), [Caching](<https://devfeed.tech/topics/caching.md>)

Tags: [backend](<https://devfeed.tech/tags/backend.md>), [caching](<https://devfeed.tech/tags/caching.md>), [firewall](<https://devfeed.tech/tags/firewall.md>), [http](<https://devfeed.tech/tags/http.md>), [http-query](<https://devfeed.tech/tags/http-query.md>), [ietf](<https://devfeed.tech/tags/ietf.md>), [load-balancing](<https://devfeed.tech/tags/load-balancing.md>), [post](<https://devfeed.tech/tags/post.md>), [security](<https://devfeed.tech/tags/security.md>), [siem](<https://devfeed.tech/tags/siem.md>), [web](<https://devfeed.tech/tags/web.md>)

### AI overview

This article examines the proposed HTTP QUERY method, which is intended to combine the safety and idempotency of GET with the ability to carry an extended request body like POST. It discusses the limitations and security risks of putting complex or sensitive queries in URLs, and considers the method's effects on caching, infrastructure compatibility, and future backend implementation.

### Source excerpt

For nearly thirty years, the Web has lived with a semantic paradox that anyone developing for the backend knows well: how do you execute a complex, voluminous query, or one containing sensitive data, if the only "safe" method available does not allow a request body? Think about when we need to send a structured search... Read more The post HTTP QUERY: the method that was missing between GET and POST appeared first on Codemotion Magazine.

## HTTP Message Signatures with curl

DevFeed: [HTTP Message Signatures with curl](<https://devfeed.tech/articles/http-message-signatures-with-curl-18900.md>)

Original publisher: [Read original article](<https://daniel.haxx.se/blog/2026/07/27/http-message-signatures-with-curl/>)

Author: Daniel Stenberg

Published: 2026-07-27T06:55:03Z

Content type: release

Language: en

Sources: [Daniel Stenberg](<https://devfeed.tech/sources/daniel-stenberg.md>)

Topics: [cURL](<https://devfeed.tech/topics/curl.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>)

Tags: [curl](<https://devfeed.tech/tags/curl.md>), [curl-and-libcurl](<https://devfeed.tech/tags/curl-and-libcurl.md>), [digital-signatures](<https://devfeed.tech/tags/digital-signatures.md>), [ed25519](<https://devfeed.tech/tags/ed25519.md>), [experimental](<https://devfeed.tech/tags/experimental.md>), [git](<https://devfeed.tech/tags/git.md>), [hmac](<https://devfeed.tech/tags/hmac.md>), [http](<https://devfeed.tech/tags/http.md>), [production](<https://devfeed.tech/tags/production.md>), [release](<https://devfeed.tech/tags/release.md>)

### AI overview

curl experimentally supports HTTP Message Signatures based on RFC 9421, allowing users to sign selected HTTP request components with ed25519 or hmac-sha256 through new command-line and libcurl options. The feature must be explicitly enabled, is discouraged for production use, and is planned for curl 8.22.0.

### Source excerpt

The recently published RFC 9421 describes how to do HTTP Message Signatures, and starting just now, curl experimentally supports them. Message Signatures The specification describes this as a mechanism for creating, encoding, and verifying digital signatures or message authentication codes over components of an HTTP message. It is a way to verify that selected parts ... Continue reading HTTP Message Signatures with curl ->

## RFC 9880 and the IoT Validation Problem

DevFeed: [RFC 9880 and the IoT Validation Problem](<https://devfeed.tech/articles/rfc-9880-and-the-iot-validation-problem-18924.md>)

Original publisher: [Read original article](<https://blog.frankel.ch/rfc-9880-iot-validation-compiler/>)

Author: Stefano Fago

Published: 2026-07-26T00:00:00Z

Content type: article

Language: en

Sources: [Nicolas Fränkel](<https://devfeed.tech/sources/nicolas-frankel.md>)

Topics: [Internet of things](<https://devfeed.tech/topics/iot.md>), [SDF](<https://devfeed.tech/topics/sdf.md>), [data](<https://devfeed.tech/topics/data.md>), [JSON](<https://devfeed.tech/topics/json.md>), [Code](<https://devfeed.tech/topics/code.md>), [CoAP](<https://devfeed.tech/topics/coap.md>), [MQTT](<https://devfeed.tech/topics/mqtt.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [TLS (Transport Layer Security)](<https://devfeed.tech/topics/tls.md>)

Tags: [architecture](<https://devfeed.tech/tags/architecture.md>), [code](<https://devfeed.tech/tags/code.md>), [data](<https://devfeed.tech/tags/data.md>), [development](<https://devfeed.tech/tags/development.md>), [iot](<https://devfeed.tech/tags/iot.md>), [json](<https://devfeed.tech/tags/json.md>), [protocol](<https://devfeed.tech/tags/protocol.md>), [sdf](<https://devfeed.tech/tags/sdf.md>), [standards](<https://devfeed.tech/tags/standards.md>), [validation](<https://devfeed.tech/tags/validation.md>)

### AI overview

This article examines RFC 9880 and its Semantic Definition Format (SDF) as an ecosystem-neutral, JSON-based way to describe IoT devices. It argues that SDF validation is best understood as a compilation problem and discusses how different IoT ecosystems represent the same physical concepts incompatibly.

### Source excerpt

The IoT/IIoT world has a data model problem and the concept of Digital Twin has made this issue more important. Plenty of people have tried to fix it. RFC 9880 and its Semantic Definition Format (SDF) are a serious attempt: a JSON-based, ecosystem-neutral way to describe what a device is and what it does. I have had some experiences with this specification, and I've understood that the format shows its full value once you treat it as source code, something you compile.

## Calendar API: Local Calendars, Cloud Sync, and Conflict Handling

DevFeed: [Calendar API: Local Calendars, Cloud Sync, and Conflict Handling](<https://devfeed.tech/articles/calendar-api-local-calendars-cloud-sync-and-conflict-handling-19235.md>)

Original publisher: [Read original article](<https://www.codenameone.com/blog/calendar-is-not-add-event/>)

Author: Shai Almog

Published: 2026-07-25T00:00:00Z

Content type: release

Language: en

Sources: [CodeName One](<https://devfeed.tech/sources/codename-one.md>)

Topics: [API](<https://devfeed.tech/topics/api.md>), [cross-platform](<https://devfeed.tech/topics/cross-platform.md>), [Concurrency](<https://devfeed.tech/topics/concurrency.md>), [Cloud](<https://devfeed.tech/topics/cloud.md>), [Google Calendar](<https://devfeed.tech/topics/google-calendar.md>), [Android](<https://devfeed.tech/topics/android.md>), [iOS](<https://devfeed.tech/topics/ios.md>), [macOS](<https://devfeed.tech/topics/macos.md>), [Microsoft](<https://devfeed.tech/topics/microsoft.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>)

Tags: [android](<https://devfeed.tech/tags/android.md>), [api](<https://devfeed.tech/tags/api.md>), [apis](<https://devfeed.tech/tags/apis.md>), [apple](<https://devfeed.tech/tags/apple.md>), [backend](<https://devfeed.tech/tags/backend.md>), [cloud](<https://devfeed.tech/tags/cloud.md>), [concurrency](<https://devfeed.tech/tags/concurrency.md>), [cross-platform](<https://devfeed.tech/tags/cross-platform.md>), [google](<https://devfeed.tech/tags/google.md>), [http](<https://devfeed.tech/tags/http.md>), [ios](<https://devfeed.tech/tags/ios.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [macos](<https://devfeed.tech/tags/macos.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [offline](<https://devfeed.tech/tags/offline.md>), [storage](<https://devfeed.tech/tags/storage.md>), [sync](<https://devfeed.tech/tags/sync.md>), [synchronization](<https://devfeed.tech/tags/synchronization.md>), [work](<https://devfeed.tech/tags/work.md>)

### AI overview

The article introduces a cross-platform calendar API that unifies local calendars and cloud providers through a capability-based model. It covers events, tasks, recurrence, time zones, offline mutations, optimistic concurrency, provider synchronization, and conflict handling.

### Source excerpt

The new calendar API handles local calendars, cloud providers, recurrence, conflicts, and offline changes through one capability-based model.

## What is a remote MCP server?

DevFeed: [What is a remote MCP server?](<https://devfeed.tech/articles/what-is-a-remote-mcp-server-13356.md>)

Original publisher: [Read original article](<https://circleci.com/blog/what-is-a-remote-mcp-server/>)

Author: Jacob Schmitt

Published: 2026-07-24T16:00:00Z

Content type: tutorial

Language: en

Sources: [The CircleCI Blog Feed | CircleCI](<https://devfeed.tech/sources/the-circleci-blog-feed-circleci.md>)

Topics: [Model Context Protocol (MCP)](<https://devfeed.tech/topics/model-context-protocol-mcp.md>), [MCP Server](<https://devfeed.tech/topics/mcp-server.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [Command-line interface](<https://devfeed.tech/topics/cli.md>)

Tags: [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [circleci-mcp-server](<https://devfeed.tech/tags/circleci-mcp-server.md>), [hosted-mcp-server](<https://devfeed.tech/tags/hosted-mcp-server.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [http](<https://devfeed.tech/tags/http.md>), [local-vs-remote-mcp](<https://devfeed.tech/tags/local-vs-remote-mcp.md>), [mcp](<https://devfeed.tech/tags/mcp.md>), [mcp-oauth](<https://devfeed.tech/tags/mcp-oauth.md>), [mcp-server](<https://devfeed.tech/tags/mcp-server.md>), [model-context-protocol](<https://devfeed.tech/tags/model-context-protocol.md>), [remote-mcp-server](<https://devfeed.tech/tags/remote-mcp-server.md>), [remote-vs-local-mcp-server](<https://devfeed.tech/tags/remote-vs-local-mcp-server.md>), [what-is-a-remote-mcp-server](<https://devfeed.tech/tags/what-is-a-remote-mcp-server.md>)

### AI overview

This explainer defines remote or hosted MCP servers, which let AI agents access external tools over HTTP from cloud-based or background environments. It compares remote and local MCP servers and describes connecting an AI agent to CircleCI through a hosted MCP server.

### Source excerpt

A remote MCP server is a hosted MCP server your AI agent reaches over HTTP instead of running locally. Here's how remote and local MCP servers differ, and how to connect an AI agent to CircleCI using the new remote MCP.

## Drag, drop, done: a visual composer for Redpanda Connect

DevFeed: [Drag, drop, done: a visual composer for Redpanda Connect](<https://devfeed.tech/articles/drag-drop-done-a-visual-composer-for-redpanda-connect-12749.md>)

Original publisher: [Read original article](<https://www.redpanda.com/blog/redpanda-connect-pipeline-builder>)

Author: Prakhar Garg

Published: 2026-07-23T00:00:00Z

Content type: article

Language: en

Sources: [Redpanda](<https://devfeed.tech/sources/redpanda.md>)

Topics: [Redpanda-Connect](<https://devfeed.tech/topics/redpanda-connect.md>), [Canvas](<https://devfeed.tech/topics/canvas.md>), [stream-processing](<https://devfeed.tech/topics/stream-processing.md>), [Caching](<https://devfeed.tech/topics/caching.md>), [Routing (disambiguation)](<https://devfeed.tech/topics/routing.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [n8n](<https://devfeed.tech/topics/n8n.md>), [workflow automation](<https://devfeed.tech/topics/workflow-automation.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [automation](<https://devfeed.tech/tags/automation.md>), [building](<https://devfeed.tech/tags/building.md>), [cache](<https://devfeed.tech/tags/cache.md>), [caching](<https://devfeed.tech/tags/caching.md>), [events](<https://devfeed.tech/tags/events.md>), [front-end](<https://devfeed.tech/tags/front-end.md>), [http](<https://devfeed.tech/tags/http.md>), [n8n](<https://devfeed.tech/tags/n8n.md>), [pipeline](<https://devfeed.tech/tags/pipeline.md>), [redpanda-connect](<https://devfeed.tech/tags/redpanda-connect.md>), [routing](<https://devfeed.tech/tags/routing.md>), [stream-processing](<https://devfeed.tech/tags/stream-processing.md>), [workflow](<https://devfeed.tech/tags/workflow.md>)

### AI overview

Redpanda introduces a visual Pipeline Builder for Redpanda Connect, using a drag-and-drop canvas to compose pipelines from inputs, processors, and outputs. The builder generates YAML while making routing, enrichment, caching, error handling, and retries easier to understand and configure. The article contrasts it with n8n, emphasizing Redpanda Connect's suitability for high-volume event streaming with ordering, backpressure, and exactly-once semantics.

### Source excerpt

A first look at the new visual Pipeline Builder for Redpanda Connect (preview), plus a roundup of recent CDC and connector updates.

## Собрать прошлое: как архивировать весь трафик сборки SONiC

DevFeed: [Собрать прошлое: как архивировать весь трафик сборки SONiC](<https://devfeed.tech/articles/sonic-24869.md>)

Original publisher: [Read original article](<https://habr.com/ru/companies/yandex/articles/1060234/>)

Author: denballakh (Яндекс, Yandex Cloud & Yandex Infrastructure)

Published: 2026-07-20T07:03:18Z

Content type: tutorial

Language: ru

Sources: [Яндекс - Как мы делаем Яндекс / Статьи](<https://devfeed.tech/sources/source.md>)

Topics: [Docker](<https://devfeed.tech/topics/docker.md>), [Debian](<https://devfeed.tech/topics/debian.md>), [HTTP](<https://devfeed.tech/topics/http.md>), [docker registry](<https://devfeed.tech/topics/docker-registry.md>), [GitHub](<https://devfeed.tech/topics/github.md>), [PyPI](<https://devfeed.tech/topics/pypi.md>), [Python](<https://devfeed.tech/topics/python.md>)

Tags: [build](<https://devfeed.tech/tags/build.md>), [debian](<https://devfeed.tech/tags/debian.md>), [docker](<https://devfeed.tech/tags/docker.md>), [docker-registry](<https://devfeed.tech/tags/docker-registry.md>), [github](<https://devfeed.tech/tags/github.md>), [http](<https://devfeed.tech/tags/http.md>), [infrastructure](<https://devfeed.tech/tags/infrastructure.md>), [mitm](<https://devfeed.tech/tags/mitm.md>), [proxy](<https://devfeed.tech/tags/proxy.md>), [pypi](<https://devfeed.tech/tags/pypi.md>), [reproducibility](<https://devfeed.tech/tags/reproducibility.md>), [sonic](<https://devfeed.tech/tags/sonic.md>)

### AI overview

This article explains how Yandex Infrastructure developed a caching MITM proxy for SONiC and YaSONiC builds. The proxy captures HTTP/HTTPS traffic and serves previously saved responses to improve build reproducibility when external dependencies change or disappear.

### Source excerpt

Интернет -- это зависимость без зафиксированной версии. Сегодня он возвращает одно, завтра -- другое, а послезавтра -- ничего. Поэтому мы решили сохранить для сборки тот интернет, который она однажды увидела. Для этого пришлось перехватывать HTTPS, выпускать собственные сертификаты, переподписывать индексы Debian и выяснять, почему Docker отправляет "случайные" заголовки. В этой статье я расскажу, как разрабатывал кеширующую MITM-проксю, которая перехватывает весь HTTP/HTTPS-трафик и отдаёт ранее сохранённые ответы. Разберём также неочевидные технические проблемы, с которыми пришлось столкнуться. Читать далее

[Next page](<https://devfeed.tech/topics/http.md?cursor=WyIyMDI2LTA3LTIwVDA3OjAzOjE4KzAwOjAwIiwgIjVhN2ZjYmM2LTc5MjYtNGU2YS1hMDU1LTc4NWVkY2FmYjNlYyJd>)