a couple months back i was on a pod with @vtahowe and @ianlivingstone chatting w/ a Billions-of-market-cap CISO about how to balance giving developers tools to make coding agents useful (think, mcps to all kinds of useful context link ticketing, email, slack etc) while avoiding data exfiltration, prompt injection, credential hijacks, etc. There was some hand-wavy "mcp gateway" talk but really cool to see this important question materialized into a formal spec for builders. There's a lot more…