Facio Blog

Practical notes on human-reviewed AI agents.

Payload-powered product notes, security writing, HITL patterns, and operational guidance from the Facio runtime: long sessions, Placet approvals, audit trails, memory, providers, channels, tools, and Docker-first operations.

Showing 86-90 of 235 articles.

Engineering

MCP Spotlight: Resend MCP Server — The React-Email-Native Transactional Email Bridge, Full Audience Management, and the Communication Default for Agents

Jun 30, 2026Engineering

MCP Spotlight: Resend MCP Server — The React-Email-Native Transactional Email Bridge, Full Audience Management, and the Communication Default for Agents

The Resend MCP Server — the email-agent default of 2026. ~20 tools (emails, audiences, broadcasts, domains, webhooks, deliverability analytics), native React Email template support (JSX compiles at send-time), MIT-licensed. Built on the infrastructure Anthropic, Linear, and Vercel use.

Product

Facio's Quota and Rate Limit Awareness: How AI Agents Stay Under the Caps Without Throttling the Workflow

Jun 30, 2026Product

Facio's Quota and Rate Limit Awareness: How AI Agents Stay Under the Caps Without Throttling the Workflow

Every external system an AI agent touches has limits. APIs have rate limits per second. Models have token quotas per minute. Storage services have request budgets per hour. Email services have daily send caps. The naive agent hits these limits and fails. The disciplined agent tracks consumption in real time, paces its requests to stay under the caps, batches where possible, and shifts work to alternative windows when quotas are tight. Facio's quota awareness turns a brittle integration into a predictable operation. Here's how the discipline works.

Security

The Network Boundary Your AI Agent Bypasses Every 30 Seconds: Why Egress Filtering Is the Last Line of Defense for AI Agent Data Exfiltration

Jun 30, 2026Security

The Network Boundary Your AI Agent Bypasses Every 30 Seconds: Why Egress Filtering Is the Last Line of Defense for AI Agent Data Exfiltration

Your agent calls 47 external endpoints per hour. The data flowing through those calls contains customer PII, internal documents, and credential tokens. The egress firewall sees HTTPS to github.com — it cannot see the tool call's arguments. Egress filtering must operate at the agent's tool invocation layer, not at the network layer.

Engineering

MCP Spotlight: Sequential Thinking MCP Server — Anthropic's Reference Implementation for Structured, Branchable, Revisable Reasoning

Jun 29, 2026Engineering

MCP Spotlight: Sequential Thinking MCP Server — Anthropic's Reference Implementation for Structured, Branchable, Revisable Reasoning

Anthropic's Sequential Thinking MCP Server — the reference implementation for structured agent reasoning. One tool (sequential_thinking), MIT-licensed, with three superpowers: revision (correct earlier thoughts), branching (explore alternatives in parallel), and expansion (adapt the scope mid-stream). The meta-tool pattern that improves every other tool the agent uses.