---
title: "Blog"
url: "https://aaif.io/blog"
---

# Blog

## The AAIF Blog
- [Catch Them Early](/blog/aaif-sandbox-phase)
- [MCP Usage Surged as the Protocol Went Stateless](/blog/mcp-usage-surged-as-the-protocol-went-stateless)
- [A2A joins AAIF’s open agentic stack](/blog/a2a-joins-aaif)
- [The EU AI Act and the New Rules for Building AI Agents](/blog/the-eu-ai-act-and-the-new-rules-for-building-ai-agents)

## From the blog
- [Trace and analyze Goose sessions with OpenTelemetry, Jaeger and ClickHouse](/blog/trace-and-analyze-goose-sessions-with-opentelemetry-jaeger-and-clickhouse)
- [Five themes from AGNTCon + MCPCon Europe](/blog/five-themes-from-agntcon-mcpcon-europe)
- [Agent identity and delegated access in MCP systems](/blog/agent-identity-and-delegated-access-in-mcp-systems)
- [Before Agents Can Work Together, They Have to Find Each Other](/blog/before-agents-can-work-together-they-have-to-find-each-other)
- [AGENTS.md speaks UNIX, and you should too](/blog/agents-md-speaks-unix-and-you-should-too)
- [What agents look like when the data can't leave the building](/blog/what-agents-look-like-when-the-data-cant-leave-the-building)
- [Docker's Sandbox Kit Spec puts Agent Permissions inside the container image](/blog/dockers-sandbox-kit-spec-puts-an-agents-permissions-inside-the-container-image)
- [The Web Is Growing a Second Interface](/blog/the-web-is-growing-a-second-interface)
- [Securing requestState with OpenBao](/blog/securing-requeststate-with-openbao)
- [AI governance in a regulated industry: How MoonPay brought MCP sprawl under control](/blog/ai-governance-in-a-regulated-industry-how-moonpay-brought-mcp-sprawl-under-control)
- [Before an agent uses a model: verifying model custody on customer infrastructure](/blog/before-an-agent-uses-a-model-verifying-model-custody-on-customer-infrastructure)
- [MCP's big, open-world vision](/blog/mcp-big-open-world-vision)
- [Your Agent Will Wake Up Eventually. Plan Accordingly.](/blog/your-agent-will-wake-up-eventually-plan-accordingly)
- [402 payment required: what enterprise MCP servers owe the agents that pay them](/blog/402-payment-required-what-enterprise-mcp-servers-owe-the-agents-that-pay-them)
- [Safety, messaging and open source agents in Shanghai](/blog/safety-messaging-and-open-source-agents-in-shanghai)
- [Introducing the First Open Source Vending Machine Benchmark](/blog/introducing-the-first-open-source-vending-machine-benchmark)
- [From supervised shells to purpose-built MCP tools](/blog/from-supervised-shells-to-purpose-built-mcp-tools)
- [Dex Still Thinks Long-Running Coding Agents Stink](/blog/dex-still-thinks-long-running-coding-agents-stink)
- [Implementing enterprise-managed MCP authorization in Keycloak](/blog/implementing-enterprise-managed-mcp-authorization-in-keycloak)
- [Envoy AI Gateway becomes Agent Router and joins AAIF](/blog/agent-router-joins-aaif)
- [Agent Router: Powerful traffic handling for agent builders](/blog/agent-router-powerful-traffic-handling-for-agent-builders)
- [Code Is Cheap. Proof Is the Bottleneck.](/blog/code-is-cheap-proof-is-the-bottleneck)
- [Agent memory: patterns, tradeoffs, open problems](/blog/agent-memory-patterns-tradeoffs-open-problems)
- [MCP 2026 changes the rules](/blog/mcp-2026-changes-the-rules)
- [Authorization in MCP 2026-07-28: Clarifying trust relationships for agentic systems](/blog/authorization-in-mcp-2026-07-28-clarifying-trust-relationships-for-agentic-systems)
- [Deploying MCP 2026-07-28 servers on AWS: A serverless reference architecture](/blog/deploying-mcp-2026-07-28-servers-on-aws-a-serverless-reference-architecture)
- [Catch Them Early](/blog/aaif-sandbox-phase)
- [MCP Usage Surged as the Protocol Went Stateless](/blog/mcp-usage-surged-as-the-protocol-went-stateless)
- [A2A v1.0: a builder's guide, part 2 - migration, security, and production ](/blog/a2a-v1-0-a-builder-s-guide-part-2-migration-security-and-production)
- [The claim isn’t hard. The paperwork is.](/blog/the-claim-isn-t-hard-the-paperwork-is)
- [Improving tool-call reliability with JSON Schema 2020-12](/blog/improving-tool-call-reliability-with-json-schema-2020-12)
- [Handle long-running MCP tool calls with the MCP Tasks extension](/blog/handle-long-running-mcp-tool-calls-with-the-mcp-tasks-extension)
- [Designing Websites for People and AI Agents with WebMCP](/blog/designing-websites-for-ai-agents-with-webmcp)
- [Your agent’s memory is a software supply chain](/blog/your-agents-memory-is-a-software-supply-chain)
- [A platform team's guide to MCP 7-28](/blog/a-platform-team-s-guide-to-mcp-7-28)
- [A2A v1.0: a builder's guide, part 1 - discovery, tasks, and clients](/blog/a2a-v1-0-a-builder-s-guide-part-1-discovery-tasks-and-clients)
- [What We Learned Putting A2A Into Production](/blog/what-we-learned-putting-a2a-into-production)
- [How to Build Reliable AI Agent Systems for Production](/blog/how-to-build-reliable-ai-agent-systems-for-production)
- [Enterprise MCP gateway security in practice with agentgateway](/blog/enterprise-mcp-gateway-security-in-practice-with-agentgateway)
- [How Does Agentic Commerce Work?](/blog/how-does-agentic-commerce-work)
- [Where A2A fits in the open agent ecosystem](/blog/where-a2a-fits-in-the-open-agent-ecosystem)
- [Building a read-only multi-cloud Kubernetes inventory with goose](/blog/building-a-read-only-multi-cloud-kubernetes-inventory-with-goose)
- [MCP sessions are gone. Where should your state live?](/blog/mcp-sessions-are-gone-where-should-your-state-live)
- [A2A joins AAIF’s open agentic stack](/blog/a2a-joins-aaif)
- [Putting a front door on local AI with agentgateway](/blog/putting-a-front-door-on-local-ai-with-agentgateway)
- [Building a governed MCP platform with agentgateway ](/blog/building-a-governed-mcp-platform-with-agentgateway)
- [Writing an effective AGENTS.md](/blog/writing-an-effective-agents-md)
- [Designing requestState for Multi Round-Trip Requests](/blog/designing-requeststate-for-multi-round-trip-requests)
- [Agent observability: what to track first](/blog/agent-observability-what-to-track-first)
- [Who told the agent it could spend?](/blog/who-told-the-agent-it-could-spend)
- [The age of stateless MCP](/blog/the-age-of-stateless-mcp)
- [We built a small browser game about the MCP 728 spec](/blog/we-built-a-small-browser-game-about-the-mcp-728-spec)
- [Non-blocking human-in-the-loop agents: re-engineering agentic runloops and state machines with MRTR](/blog/non-blocking-human-in-the-loop-agents-re-engineering-agentic-runloops-and-state-machines-with-mr)
- [The enterprise MCP scaling paradox: why every agent needs a tailored backend](/blog/the-enterprise-mcp-scaling-paradox-why-every-agent-needs-a-tailored-backend)
- [Exposing OpenAPI operations as authorized MCP tools with agentgateway and Keycloak](/blog/exposing-openapi-operations-as-authorized-mcp-tools-with-agentgateway-and-keycloak)
- [From Skills and Tools to Portable Agent Plugins](/blog/from-skills-and-tools-to-portable-agent-plugins)
- [Using Keycloak as an MCP authorization server](/blog/using-keycloak-as-an-mcp-authorization-server)
- [AI Music Needs More Knobs: YouAndOrchestra Makes Conducting Agents a Compositional Exercise](/blog/ai-music-needs-more-knobs-youandorchestra-makes-conducting-agents-a-compositional-exercise)
- [Three judgments from AI Native Shanghai](/blog/three-judgments-from-ai-native-shanghai)
- [The EU AI Act and the New Rules for Building AI Agents](/blog/the-eu-ai-act-and-the-new-rules-for-building-ai-agents)
- [The Ecosystem Responds to Stateless MCP](/blog/the-ecosystem-responds-to-stateless-mcp)
- [MCP in production: what changes after the demo works](/blog/mcp-in-production-what-changes-after-the-demo-works)
- [56 things we learned from MCP Dev Summit Bengaluru](/blog/56-things-we-learned-from-mcp-dev-summit-bengaluru)
- [Governance as Infrastructure — What the MCP 2026-07-28 Migration Actually Demands of Permissions, Audit, and Lifecycle](/blog/governance-as-infrastructure-what-the-mcp-2026-07-28-migration-actually-demands-of-permissions-a)
- [Safely Rolling Out the July 28 MCP Update with agentgateway](/blog/safely-rolling-out-the-july-28-mcp-update-with-agentgateway)
- [The Anatomy of MCP Authorization: How the Hardened Flow Actually Runs](/blog/the-anatomy-of-mcp-authorization-how-the-hardened-flow-actually-runs)
- [Verifiable Evidence at the MCP Boundary](/blog/verifiable-evidence-at-the-mcp-boundary)
- [Migrate Sessions to Stateless Requests with MCP 2026-07-28](/blog/migrate-sessions-to-stateless-requests-with-mcp-2026-07-28)
- [MCP Graduates to Enterprise Infrastructure: Stateless Architecture, Formal Governance, and Security Hardening](/blog/mcp-graduates-to-enterprise-infrastructure-stateless-architecture-formal-governance-and-security)
- [7-28 Hands MCP to Platform Teams](/blog/7-28-hands-mcp-to-platform-teams)
- [MCP Just Handed You a Deprecation Policy. Steal It.](/blog/mcp-just-handed-you-a-deprecation-policy-steal-it)
- [Measuring AGENTS.md: What Five Runs Show That One Doesn't](/blog/measuring-agents-md-what-five-runs-show-that-one-doesn-t)
- [MCP 2026-07-28: What's Changing and How to Migrate](/blog/mcp-2026-07-28-whats-changing-and-how-to-migrate)
- [Agentgateway now supports ID-JAG and MCP Enterprise Managed Auth](/blog/agentgateway-now-supports-id-jag-and-mcp-enterprise-managed-auth)
- [MCP 7-28 Release Party — Come Celebrate With the AAIF Community Near You](/blog/mcp-7-28-release-party-come-celebrate-with-the-aaif-community-near-you)
- [Running goose fully offline on a DGX Spark](/blog/running-goose-fully-offline-on-a-dgx-spark)
- [Introducing MCP 7-28 for AI Application Developers: What Goes Away, and What Might Break](/blog/introducing-mcp-7-28-for-ai-application-developers-what-goes-away-and-what-might-break)
- [Agentic AI Is Being Built in Real Life — Come Build It With Us](/blog/agentic-ai-is-being-built-in-real-life-come-build-it-with-us)
- [The Human Agent: A Random Lunch, Blind Developers, and the Human Connection Launching the Loop](/blog/the-human-agent-blind-developers-and-the-human-connection-launching-the-loop)
- [Introducing the MCPA: the First Official Certification for the Model Context Protocol](/blog/introducing-the-mcpa-the-first-official-certification-for-the-model-context-protocol)
- [Agentic AI Momentum Report](/blog/agentic-ai-momentum-report)
- [Can MCP Help a Small Local Model Shine? Hands-on with Goose](/blog/can-mcp-help-a-small-local-model-shine-hands-on-with-goose)
- [Community Spotlight: Building the Interoperable Internet of Agents with Jason Cottrell](/blog/community-spotlight-building-the-interoperable-internet-of-agents-with-jason-cottrell)
- [Beyond Single-User Bots: How goose is Building a Distributed AI Teammate Ecosystem with MCP and Shared Compute](/blog/how-goose-is-building-a-distributed-ai-teammate-ecosystem)
- [Agentgateway v1.3.0: LLM Consumption, Reimagined](/blog/agentgateway-v1-3-0-llm-consumption-reimagined)
- [Productionizing MCP for Regulated Industries: Three Hard Constraints for Enterprise Engineering](/blog/productionizing-mcp-for-regulated-industries-three-hard-constraints-for-enterprise-engineering)
- [Community Spotlight: JetBrains' Katherine Druckman on Why Open Collaboration Is Essential to Trusted Agentic AI](/blog/community-spotlight-jetbrains-katherine-druckman-on-why-open-collaboration-is-essential-to-trusted-agentic-ai)
- [A Stronger Voice: What Membership Can Mean in Open Agentic AI](/blog/a-stronger-voice-what-membership-can-mean-in-open-agentic-ai)
- [We Planned for 10 Ambassadors. We're Welcoming 138.](/blog/we-planned-for-10-ambassadors-were-welcoming-138)
- [Native Speakers: Why AI's Most Powerful Users Are Blind](/blog/native-speakers-why-ais-most-powerful-users-are-blind)
- [How Vstorm Put AGENTS.md Into Every AI Agent-Ready Project It Ships](/blog/how-vstorm-put-agents-md-into-every-ai-agent-ready-project-it-ships)
- [Skills Over MCP](/blog/skills-over-mcp)
- [Introducing the AAIF Annual Technical Excellence Awards — Nominations Now Open](/blog/introducing-the-aaif-annual-technical-excellence-awards)
- [How to Write a Great Nomination for the AAIF Technical Excellence Awards](/blog/how-to-write-a-great-nomination-for-the-aaif-technical-excellence-awards)
- [MCP's Missing Half: Why Second-Order Servers Don't Exist Yet](/blog/mcps-missing-half-why-second-order-servers-dont-exist-yet)
- [TIL at MCPDev Summit Bengaluru: Six Lessons from the Agentic Frontier](/blog/til-at-mcpdev-summit-bengaluru-six-lessons-from-the-agentic-frontier)
- [AI Agents for Air-Gapped Industrial Environments: Why goose?](/blog/ai-agents-for-air-gapped-industrial-environments-why-goose)
- [Three Key Operational Patterns You Need to Prevent MCP Horror Stories](/blog/three-key-operational-patterns-you-need-to-prevent-mcp-horror-stories)
- [How Port of Context eliminated production agent failures with goose, Arcade.dev, and Code Mode](/blog/how-port-of-context-eliminated-production-agent-failures)
- [goose Doubles Down on Open in Latest Two Releases](/blog/goose-doubles-down-on-open-in-latest-two-releases)
- [Karpathy's LLM Wiki as Agent Memory](/blog/karpathys-llm-wiki-as-agent-memory)
- [Designing agentgateway: A Unified High-Performance Gateway for AI and API Traffic](/blog/designing-agentgateway-a-unified-high-performance-gateway-for-ai-and-api-traffic)
- [agentgateway Joins AAIF as an Open Gateway for Agentic AI Infrastructure](/blog/agentgateway-joins-aaif-as-an-open-gateway-for-agentic-ai-infrastructure)
- [AAIF Community Spotlight: Yaron Schneider – Why Strong Foundations and Standardization Will Define the Era of Agentic AI](/blog/why-strong-foundations-will-define-the-era-of-agentic-ai)
- [The Tool Abstraction Problem: Lessons Learned Building 1000+ MCP Tools](/blog/the-tool-abstraction-problem)
- [Datadog's 5 Tips for Building AI Agents](/blog/datadogs-5-tips-for-building-ai-agents)
- [MCP Is Growing Up](/blog/mcp-is-growing-up)
- [We're Building a Squad of Agentic AI Advocates: Join the AAIF Ambassador Program](/blog/were-building-a-squad-of-agentic-ai-advocates-join-the-aaif-ambassador-program)
- [Building Trust Into the Protocol: Bloomberg's MCP Contributions](/blog/building-trust-into-the-protocol-bloombergs-mcp-contributions)
- [Welcome to AAIF: The MLOps Community Finds Its New Home](/blog/mlops-community-joins-aaif)
- [100 Tools Down to 3: Prime Video's Approach to Progressive Tool Discovery](/blog/prime-videos-approach-to-progressive-tool-discovery)
- [MCP Was Designed for the Cloud. The Edge Has Different Rules.](/blog/mcp-was-designed-for-the-cloud-the-edge-has-different-rules)
- [Are MCP and CLIs Competing?](/blog/are-mcp-and-clis-competing)
- [How Uber Runs 60,000 AI Agent Tasks Per Week With MCP](/blog/how-uber-runs-60000-ai-agent-tasks-per-week-with-mcp)
- [Stateless: The Future of MCP Transports](/blog/stateless-the-future-of-mcp-transports)
- [The Missing Layer in AI Interoperability: Discovery](/blog/the-missing-layer-in-ai-interoperability-discovery)
- [Your MCP Server Works. Your Agent Doesn't. Here's Why.](/blog/your-mcp-server-works-your-agent-doesnt-heres-why)
- [Anthropic's Lessons from Building MCP Apps](/blog/anthropics-lessons-from-building-mcp-apps)
- [How to Submit your Project to the AAIF](/blog/how-to-submit-your-project-to-the-aaif)
- [The Four Pillars of Agentic AI Infrastructure on Kubernetes](/blog/agentic-ai-infrastructure-on-kubernetes)
- [Stripe on Agentic Commerce: Trends from 2026](/blog/five-lessons-stripe-sessions-on-agentic-commerce)
- [Closing the Context Gap: Why MCP + Skills Works](/blog/closing-the-context-gap-why-mcp-skills-works)
- [Use agentgateway to Mediate MCP and LLM Traffic at Solo.io](/blog/use-agentgateway-to-mediate-mcp-and-llm-traffic-at-solo-io)
- [How Duolingo Built an AI Slackbot With 180+ MCP Tools](/blog/how-duolingo-built-an-ai-slackbot-with-180-mcp-tools)
- [Debugging the Hardest Parts of MCP with MCP Debugger](/blog/debugging-the-hardest-parts-of-mcp-with-mcp-debugger)
- [From Workflow Orchestration to Agentic Orchestration](/blog/from-workflow-orchestration-to-agentic-orchestration)
- [MCP Apps: Extending the Frontier](/blog/mcp-apps-extending-the-frontier)
- [Where New MCP Ideas Go to Become Real: Goose as a Proving Ground](/blog/where-new-mcp-ideas-go-to-become-real-goose-as-a-proving-ground)
- [MCP Maintainer Roundtable: Control, Security, And Quality](/blog/mcp-maintainer-roundtable-control-security-and-quality)
- [MCP Is Now Enterprise Infrastructure: Everything That Happened at MCP Dev Summit North America 2026](/blog/mcp-is-now-enterprise-infrastructure-everything-that-happened-at-mcp-dev-summit-north-america-2026)
- [Why I’m Joining the Agentic AI Foundation—Building the Foundation for the Internet of Agents](/blog/why-im-joining-the-agentic-ai-foundation-building-the-foundation-for-the-internet-of-agents)
- [Building the Foundation for Agentic AI](/blog/building-the-foundation-for-agentic-ai)
- [Coding Agents Are the Foundation for Every Agent You'll Ever Build](/blog/coding-agents-are-the-foundation-for-every-agent-youll-ever-build)
- [AAIF's First Quarter Success Story: New Members, Technical Wins, and Open Governance](/blog/aaifs-first-quarter-success-story-new-members-technical-wins-and-open-governance)

**Subscribe**

## Subscribe to the AAIF Briefing

Weekly signal on standards, governance, and the people building the future. No fluff. Just what matters.

[Subscribe](#) · [About AAIF](/about)