https://juergen-neulinger.dev/tags/security/Recent content in Security on Juergen Neulingerhttps://juergen-neulinger.dev/images/og-give-up.pnghttps://juergen-neulinger.dev/images/og-give-up.pngHugoen-usTue, 18 Aug 2026 11:13:08 +0200https://juergen-neulinger.dev/posts/mcp-gateway-03-what-it-takes-to-run-one/Tue, 18 Aug 2026 11:13:08 +0200https://juergen-neulinger.dev/posts/mcp-gateway-03-what-it-takes-to-run-one/The honest accounting for a reference MCP gateway: the deliberate simplifications, what the newer protocol revision changes, and everything still missing before production.https://juergen-neulinger.dev/posts/mcp-gateway-02-three-layers-of-policy/Tue, 18 Aug 2026 11:12:43 +0200https://juergen-neulinger.dev/posts/mcp-gateway-02-three-layers-of-policy/Splitting MCP authorization across three Rego layers with three owners — platform, domain team, tool owner — so that no team can widen another team's grant.https://juergen-neulinger.dev/posts/mcp-gateway-01-why-you-need-one/Tue, 18 Aug 2026 11:05:23 +0200https://juergen-neulinger.dev/posts/mcp-gateway-01-why-you-need-one/A walk-through of an open, MIT-licensed reference MCP gateway built on FastMCP, OPA and Microsoft Entra ID — why an enterprise MCP rollout needs a single control point, and what that control point has to do.