Anurag Tiwari

Blog

Short notes, and the occasional longer post. RSS

2026

  1. How an MCP client logs in

    From a bare 401 to a working token, step by step, and what each step defends against.