#mcp
mcp

Faking a Yes: 6 Attacks on the Human Confirmation in a .NET 10 MCP Server

A developer red-teamed the confirmation step of a refund MCP server built on ASP.NET Core with the official C# SDK (ModelContextProtocol 2.3.0). Six attacks — plain-JSON requestState, replaying another user's approval, injected form fields and a pre-checked consent box — each led to a concrete server-side defense, plus a checklist you can apply to your own tools.

A C# MCP Server with Single-Use Order Approvals

Martin Pisacreta built a small .NET 8 MCP server where the order cancellation tool requires a separately recorded, single-use, expiring approval instead of trusting the model's confirmation. The article walks through the claim-before-use approval store, the tool contract and the limits of the design, backed by 12 passing tests.

Running AWS Transform from GitHub Copilot through MCP

AWS has documented how to connect its AWS Transform MCP server to GitHub Copilot agent mode, so migrations can be driven from the chat box in Visual Studio or VS Code. The walkthrough ports an Azure Functions .NET app to AWS Lambda using the Lambda Annotations Framework. It is worth a read if your team is weighing an Azure-to-AWS move or wants a repeatable agent-driven migration workflow.

MCP C# SDK 2.0 Makes HTTP Stateless by Default

Microsoft released version 2.0 of the official MCP C# SDK, implementing the 2026-07-28 Model Context Protocol revision. Streamable HTTP servers are now stateless by default, and Multi Round-Trip Requests (MRTR) let interactive tools ask clients for input. Releases 2.1 to 2.3 added hybrid session serving, a subscriptions/listen handler and several OAuth and discovery fixes.

Codex 0.164.0 adds /presets, inline /model and MCP sign-in

Codex CLI 0.164.0 lets you save reusable prompts and slash commands in ten numbered /presets slots. The /model and /permissions commands now accept inline arguments to set the model, reasoning effort, speed or permission profile in one go. Enterprise MCP connections gained new sign-in options, including OAuth clients that need secrets.

Microsoft Work IQ: giving AI agents Microsoft 365 context via MCP and A2A

Microsoft has introduced Work IQ, a workplace intelligence layer that lets AI agents read and act on live Microsoft 365 and Dynamics 365 data. Developers can reach it through an MCP server, an A2A endpoint or a REST API instead of wiring up many Graph endpoints. Every request runs under the signed-in user's Entra ID identity.