1. The access collection black hole You need Figma access, Google Analytics, WordPress admin, GitHub, and the client's Slack. You ask. They forward a password email from two years ago. You ask again. Their developer says they'll get back to you. Three days pass. The fix: Send a single, complete access list on Day 1 — not "we'll need some access" but the exact list, with specifics for each tool,
The Dangerous Bugs Are the Ones That Don't Crash: Building Input Validation for My MCP Server I was building an MCP server for an event platform that automates speaker communications (confirmations, reminders, calendar invites, follow-ups). An agent created a session confirmation for "Monday March 8th." March 8th was a Sunday. I caught it. But catching it was just the beginning. The confirmation