Field notes on AI-native SaaS.
How to ship MCP servers, embed in-product AI assistants, and monetize AI usage — written by the team building the platform.
AI-native SaaS: a 2026 playbook for going from API to AI product
A practical 2026 playbook for shipping AI-native SaaS: MCP server, in-product assistant, grounding, per-user metering, and a 90-day path from API to AI product.
- MCP education
We tested 25 "official" MCP servers for one-click OAuth. Ten failed.
A registration_endpoint in a provider's OAuth metadata isn't proof it accepts self-registration. Real testing against Intercom, Calendly, PostHog, Freshdesk and 21 other MCP servers found a charset bug and ten false positives — here's what broke and how we fixed the marketplace around it.
Sep 13, 2026 · 6 min - MCP education
MCP error handling patterns that hosts can actually use
Three error categories every MCP server should return — retryable, user_action_required, permanent — plus the shape, the audit story, and why you should never leak a stack trace.
Jul 13, 2026 · 4 min - MCP education
MCP server pricing: what hosting costs, and the limits that keep it predictable
Hosted MCP pricing models compared (per-endpoint vs usage vs platform bundles), and the protection stack — rate limits with burst, monthly stop-loss caps, per-customer allowances — that makes agent traffic budgetable.
Jul 11, 2026 · 5 min - MCP education
MCP distribution: how customers actually find and connect your server
Shipping an MCP endpoint is step one — distribution is the channel: your own /use-from-AI page, directory listings, one-click install links, and the generative-engine surface that makes assistants recommend you.
Jul 11, 2026 · 4 min - MCP education
The MCP connect page is your new signup form — design it like one
How MCP clients discover auth (the four-RFC handshake: 9728, 8414, 7591, PKCE) and what belongs on the hosted connect screen your customers see: branding, minimal credential ask, live validation, privacy copy.
Jul 11, 2026 · 5 min - MCP education
MCP server analytics: what to measure when your customers' agents are the users
The four metric layers for production MCP servers — per-customer adoption, outcome-based reliability, per-tool health, protection headroom — plus the log schema and the two pitfalls that poison MCP dashboards.
Jul 11, 2026 · 5 min - MCP education
AI agents need different docs: writing MCP tool descriptions that don't hallucinate
Agents can't ask follow-ups — your MCP tool descriptions are their entire world. Seven rules (verb accuracy, enums verbatim, ID provenance, concrete return shapes) and the AI pipeline that scales them to 84 tools.
Jul 11, 2026 · 5 min - MCP education
Make your SaaS usable from Claude, Cursor and ChatGPT — with one MCP URL
The per-client playbook for shipping your product into AI assistants: Claude custom connectors, Cursor deep links and mcp.json, ChatGPT connectors — all from one spec-compliant MCP endpoint.
Jul 11, 2026 · 5 min - MCP education
Per-customer identity for MCP servers: the end of the shared API key
Shared API keys turn MCP servers into liability: no attribution, no selective revocation, silent authz bypass. The gateway pattern gives every customer their own credential — encrypted, forwarded per call, revocable.
Jul 11, 2026 · 5 min - MCP education
GraphQL to MCP: introspection, nullability landmines, and lean selection sets
Turning a GraphQL API into MCP tools: query/mutation→tool mapping, why greedy selection sets explode on non-nullable fields, per-customer credential forwarding, and verb-accurate descriptions.
Jul 11, 2026 · 6 min - MCP education
OpenAPI to MCP: the practical conversion guide
How to convert an OpenAPI spec into MCP tools that agents actually use well: operation→tool mapping, curation, read/write flags, agent-grade descriptions, and the gotchas that survive spec review.
Jul 11, 2026 · 6 min - MCP education
Why you shouldn't build your MCP server in-house (the 80/20 nobody scaffolds)
AI can scaffold an MCP server in an afternoon — but per-customer auth, OAuth 2.1, quotas, logs and real-client compatibility are the 80% you'd still be building months later. The honest build-vs-buy analysis.
Jul 11, 2026 · 6 min - MCP education
Cloudflare might be blocking your AI customers — the AI-bot trap for MCP servers
Cloudflare's AI-bot protections block legitimate Claude and ChatGPT traffic to APIs and MCP servers. How to spot edge blocking (zero server logs, OAuth passes, tool calls vanish) and fix it without disabling bot protection.
Jul 11, 2026 · 5 min - MCP education
The three bugs that break real MCP clients (found with Claude in production)
A 405-vs-401 handshake detail, a missing CORS header, and Cloudflare's AI-bot blocking: three production bugs that pass spec review but break Claude, Cursor and ChatGPT — with symptoms and fixes.
Jul 11, 2026 · 6 min - MCP education
Case study: AnnounceKit turned its GraphQL API into an 84-tool MCP in one afternoon
How AnnounceKit converted its GraphQL API into a hosted MCP server with 84 typed tools, per-customer authentication and usage analytics — live for Claude, Cursor and ChatGPT the same day.
Jul 11, 2026 · 7 min - MCP education
MCP vs REST APIs: when to wrap and when to skip
MCP and REST solve different problems for different consumers. The diffs that matter — discovery, auth, errors, pagination, bounded output — and why most MCP servers are just glue over REST.
Jul 9, 2026 · 4 min - MCP education
MCP rate limiting and quotas: a practical guide
Why MCP servers need stricter limits than REST APIs, and how to layer per-tool, per-user, per-workspace, and cost caps without breaking agent UX.
Jul 5, 2026 · 4 min - MCP education
The production MCP server checklist
Ten things every MCP server needs before it ships to enterprise customers — auth, scopes, quotas, observability, audit, versioning, dry-run, rollback, health, docs.
Jul 4, 2026 · 5 min - MCP education
MCP audit logs that actually matter at security review
Audit logs are a compliance artifact, not a debug stream. Here's the minimum field set, retention policy, and tamper-evidence pattern that survives enterprise procurement.
Jul 1, 2026 · 5 min - MCP education
MCP Tools vs Resources vs Prompts: which primitive when
MCP exposes three primitives because hosts render each as a different UI. Here's the decision rule for picking Tools, Resources, or Prompts — with examples.
Jun 27, 2026 · 4 min - Comparison & discovery
Managed vs self-hosted MCP gateway: a buyer's framework
Your MCP tools stay yours either way — what's negotiable is the gateway layer. Here's a clear-eyed framework for when to buy managed and when self-hosting actually pays back.
Jun 26, 2026 · 6 min - MCP education
What is an MCP server? A plain-English guide for 2026
Plain-English guide to MCP servers: what the Model Context Protocol is, how an MCP server differs from a REST API, the anatomy of tools and resources, and a production checklist.
Jun 25, 2026 · 6 min - MCP education
OAuth for MCP servers: the 2025-06 spec, explained
OAuth 2.1 with PKCE is how the MCP spec authorizes remote servers. Here's the flow, the spec requirements, and the pitfalls to avoid when shipping a hosted MCP server.
Jun 23, 2026 · 5 min - MCP education
MCP vs function calling: what's actually different
MCP and function calling solve different problems. Function calling is a per-model capability; MCP is the cross-model protocol that makes your tools portable. Here's how they fit together in production.
Jun 22, 2026 · 5 min - MCP education
MCP server security: a production checklist
Production security checklist for MCP servers: short-lived per-user JWTs, tool-level authorization, gateway rate limits and cost caps, confirmation for destructive writes, prompt-injection handling, and append-only audit logs.
Jun 21, 2026 · 7 min - Comparison & discovery
Choosing an MCP host: widget, Claude, Cursor, or custom
Your MCP server runs in many hosts — widget, Claude Desktop, Cursor, custom agents. Here's how to pick the right host per use case, which spec capabilities differ between hosts, and how auth changes per host.
Jun 18, 2026 · 5 min