Tags

#ai
ai

41stories
1 d agolatest
.NET 10
Keyless AI chat
DVDEV Community: #dotnet Henrique Mauri 1 d ago

A secure enterprise chat with React, .NET 10 and Microsoft Foundry

The article targets the common mistake of calling the model straight from the front end with the API key in JavaScript, and instead wires React to a .NET 10 Minimal API that talks to Microsoft Foundry without any keys. It walks through Entra ID authentication, a server-owned system prompt, Server-Sent Events streaming and IP-based rate limiting as the protections that separate a demo from a product.

AI
AI

LLM tokens measured in C#: why AI can't count the R's in strawberry

The model's failure on the "strawberry" question isn't a counting problem: it never sees letters, only numeric pieces called tokens. Using Microsoft.ML.Tokenizers 2.0.1 and the gpt-5 tokenizer, the author measures this from C# and shows that the word alone is a single token with ID 101830, so the r's inside it stay out of reach. The piece also covers how token cost varies by language, by numbers, and by random text such as GUIDs, plus how to count tokens in .NET.

.NET MCP güvenliği
6 attacks on MCP confirmation
DVDEV Community: #dotnet MICHAEL-MAURICE 2 d ago

Faking a Yes: 6 Attacks on the Human Confirmation in a .NET 10 MCP Server

A developer red-teamed the confirmation step of a refund MCP server built on ASP.NET Core with the official C# SDK (ModelContextProtocol 2.3.0). Six attacks — plain-JSON requestState, replaying another user's approval, injected form fields and a pre-checked consent box — each led to a concrete server-side defense, plus a checklist you can apply to your own tools.

Claude Code
Reusable review workflow

A reusable Claude Code skill for reviewing ASP.NET Core endpoint changes

Nick Cosentino explains how to package a recurring .NET review job as a project-scoped Claude Code skill. The example reviews endpoint changes across validation, authorization, response mapping and persistence, and the article stresses clear limits on what the agent may run. It is a practical starting point for teams that want repeatable AI-assisted reviews of ASP.NET Core code.

Codebase cleanup
Hunt dead code with agents

Using AI agents to clean up dead code, stale packages and feature flags

A NimblePros Halloween post walks through removing the accumulated cruft of long-lived .NET codebases: unused private members, unreferenced public types, unused or vulnerable NuGet packages and stale feature flags. The method pairs compiler analyzers and dotnet CLI checks with an AI agent that investigates edge cases, guided by a reusable skill file. It is a practical playbook for teams who never find time to clean up.

Claude Code
Agent loop for .NET
DVDEV Community: #dotnet Mehdi Mohseni 4 d ago

Claude Code for .NET Developers: A Practical Agentic Workflow

Claude Code is an agent that reads a repository, plans changes, edits files and runs dotnet build and dotnet test until the code passes. Mehdi Mohseni's guide shows how a .NET team can set it up with a CLAUDE.md, a PostToolUse build hook, plan mode and permission guardrails. It is worth reading if you want the agent to check its own work.

Fabric IQ
Business meaning for agents
KCKunal Chowdhury [email protected] (Kunal Chowdhury) 4 d ago

Microsoft Fabric IQ: ontologies for Data Agents and Operations Agents

Microsoft Fabric IQ is a new Fabric workload that maps OneLake tables, Power BI semantic models and real-time Eventhouse streams to shared business entities. Its Ontology item, currently in preview, lets Fabric Data Agents and Operations Agents work with business concepts instead of raw schemas. Read on if you are deciding whether to model business meaning before connecting LLMs to your data.

AI agents
Checks before the model
DVDEV Community: #dotnet MICHAEL-MAURICE 5 d ago

Six checks an AI Telegram assistant needs before the model runs

A developer built a Telegram assistant in n8n that can send email and book meetings, with its decisions guarded by a small ASP.NET Core API on .NET 10. The post lists six checks that run before the model sees a request: chat allowlist, duplicate updates, stale messages, voice length, contact ambiguity and time zones. It is a useful checklist for any bot that triggers side effects.

Feedback

Found a bug or have an idea? Your message lands straight in my inbox.

Type of message