Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Clear

Showing 11-15 of 62 articles in Engineering.

Engineering

MCP Security Architecture 2026: Threat Models, Sandboxing, and the Defense-in-Depth Layers Every Production Agent Deployment Needs

Jul 11, 2026Engineering

MCP Security Architecture 2026: Threat Models, Sandboxing, and the Defense-in-Depth Layers Every Production Agent Deployment Needs

The defense-in-depth reference architecture every team deploying MCP in production needs. Six layers: server verification → process sandboxing → credential isolation → per-tool RBAC → HITL approval → audit trail. Plus prompt-injection defense and multi-agent trust boundaries. Companion to the MCP Spotlight series.

Engineering

MCP Spotlight: Memory MCP Server — Anthropic's Reference Implementation for Persistent, Shareable, Graph-Based Agent Memory Across Conversations

Jul 10, 2026Engineering

MCP Spotlight: Memory MCP Server — Anthropic's Reference Implementation for Persistent, Shareable, Graph-Based Agent Memory Across Conversations

The official Memory MCP Server by Anthropic — 9 tools built around a graph-based knowledge model with three primitives: entities (nodes), relations (typed edges), observations (facts). JSONL storage that's persistent across sessions, version-controllable with git, and shareable across agents. MIT-licensed.

Engineering

MCP Spotlight: Linear MCP Server — The Official Issue-Tracking Bridge With Initiatives, Project Milestones, Code Intelligence, and the Engineering-Workflow Default for Agents

Jul 9, 2026Engineering

MCP Spotlight: Linear MCP Server — The Official Issue-Tracking Bridge With Initiatives, Project Milestones, Code Intelligence, and the Engineering-Workflow Default for Agents

The official Linear MCP Server — ~40 focused tools covering issues, projects, cycles, initiatives, project milestones, updates, comments, customers. February 2026 added Initiatives + Project Milestones for parity with the web app. MIT-licensed, OAuth 2.0 + Personal API Key support. The issue-tracking + project-management default for engineering agents in 2026.

Engineering

MCP Spotlight: Cloudflare MCP Server — The Two-Tool `search()` + `execute()` Bridge to the Entire 2,500-Endpoint Cloudflare Platform

Jul 8, 2026Engineering

MCP Spotlight: Cloudflare MCP Server — The Two-Tool `search()` + `execute()` Bridge to the Entire 2,500-Endpoint Cloudflare Platform

The official Cloudflare MCP Server — the boldest tool-surface design in the MCP ecosystem. Just 2 tools (search + execute) expose the entire 2,500+ endpoint Cloudflare API (Workers, R2, D1, DNS, AI Gateway, Vectorize, Zero Trust, Stream). MIT-licensed, official Cloudflare-maintained. The minimal-surface design pattern at its most extreme.

Engineering

MCP Spotlight: Playwright MCP Server by Microsoft — The Accessibility-Snapshot Browser Automation Default for Agents

Jul 7, 2026Engineering

MCP Spotlight: Playwright MCP Server by Microsoft — The Accessibility-Snapshot Browser Automation Default for Agents

The official Playwright MCP Server by Microsoft — ~40 focused tools covering navigation, interaction, forms, network mocking, tracing, video recording. Multi-engine support (Chromium/Firefox/WebKit), accessibility-snapshot navigation (not pixel screenshots), Apache 2.0. The browser-automation default for AI agents in 2026.