Back to Directory/Security & Auth

io.github.hezeclark/devkits

12 local developer tools: JSON, Base64, JWT, regex, hash, UUID, Markdown, diff, cron.

Security & Authv1.0.0
View on GitHub

Learn More

MCP Server Authentication: API Keys vs OAuth 2.1 ExplainedThe MCP specification adopted OAuth 2.1 in its 2025 revision. Static API keys still dominate for single-developer tools. This guide breaks down when each applies, what PKCE requires, and how the 221 security-category servers on MCPFind reflect real-world adoption patterns.Read articleMCP Security Basics: What to Know Before Adding ServersEvery MCP server you add to Claude gets access to tools that can read files, call APIs, or query databases. Before connecting one, you should understand the permission model, what prompt injection looks like in practice, and how to evaluate whether a server is trustworthy. This guide covers the basics without requiring a security background.Read article