Working notes from building an agent-permissions layer: where the official docs stop, what the protocols actually do, and what broke.https://useinline.dev/en-gbhttps://useinline.dev/articles/probing-what-an-mcp-client-gives-away/https://useinline.dev/articles/probing-what-an-mcp-client-gives-away/How to measure what an MCP client actually hands a server it has just met — headers, roots, elicitation, sampling — and the transport details that will make the measurement wrong if you get them subtly right.Sun, 27 Sep 2026 00:00:00 GMTEngineeringhttps://useinline.dev/articles/delegating-less-than-you-hold/https://useinline.dev/articles/delegating-less-than-you-hold/Four manager-to-sub-agent scenarios run against three role-scoped Gmail binaries, including a sub-agent that tries every write it can. What the process boundary actually guarantees, and what it does not.Sun, 20 Sep 2026 00:00:00 GMTResearchhttps://useinline.dev/articles/workspace-mcp-identity-is-session-scoped/https://useinline.dev/articles/workspace-mcp-identity-is-session-scoped/An audit of Google's five Workspace MCP servers against the five REST APIs underneath them. Both wrappers reach the same endpoints with the same OAuth scopes; only one of them lets a manager agent hand a sub-agent less access than it holds itself.Sat, 12 Sep 2026 00:00:00 GMTResearch