Zuplo

@Zuplo

Zuplo's API gateway helps you ship APIs you're proud of from day 1. 🌐 zuplo.com 🎥 youtube.com/@zuplo 💬 discord.zuplo.com

Remote, USA

zuplo.com

Joined November 2009

75 Following

1,919 Followers

Replies Reposts Media

Pinned
Zuplo
@Zuplo
Nov 24, 2025
We're running a survey on MCP adoption and would love your input. Takes ~5 minutes, and we'll share the full results with all respondents. zuplo.link/mcpsurvey Whether you're building servers, integrating MCP, or just exploring it, your perspective matters. @MCP_Community
Zuplo State of MCP Survey
From zuplo.link
Zuplo
@Zuplo
Sep 26
Prompt injection usually arrives in what a tool returns, not the user request. That is an outbound check. Zuplo's prompt-injection-outbound policy screens responses before an agent reads them, and strict defaults to false, so detection failures pass:
Protecting MCP Servers from Prompt Injection Attacks - Zuplo
From zuplo.com
Zuplo
@Zuplo
Sep 26
The 2026-07-28 MCP spec deprecates OAuth Dynamic Client Registration in favor of Client ID Metadata Documents, and binds client credentials to the issuer that issued them. Per-server auth means per-server rewrites. Keep identity in your IdP:
Why MCP Gateways Should Use Existing Authentication Services - Zuplo
From zuplo.com
1
Zuplo
@Zuplo
Sep 8
GitHub's secret scanning partner program can alert you when your API keys leak, but only if they carry a unique prefix and a checksum. That format decision cannot be retrofitted without rotating every customer key. Nine practices, walked through: zuplo.com/videos/api-key…
Zuplo
@Zuplo
Sep 8
A User-Agent header is a self-reported label. Anything can claim to be a browser. Sept 1: the IETF Web Bot Auth WG adopted HTTP Message Signatures for automated traffic. Identity from a signature you verify, not a header you trust: zuplo.com/videos/identif…

Zuplo

Zuplo’s posts