Blog

Updates, insights, and MCP know-how from the team at Stacklok

May 05, 2026

How to evaluate MCP runtimes against the OWASP Top 10

The OWASP MCP Top 10 reads like ten distinct problems, and most coverage treats them that way: ten boxes to check, ten features to ship. Token mismanagement, tool poisoning, and …

May 04, 2026

Shadow MCP: the AI governance problem hiding in plain sight

Most enterprises believe they have a handle on their MCP deployments. They’re usually wrong, and often by an order of magnitude. Here’s what you’ll learn in this post: The number …

April 29, 2026

ToolHive grows up: What the CRD graduation to v1beta1 means for your cluster

ToolHive’s CRDs graduate to v1beta1, a stability commitment built on seven months of new auth, composition, discovery, and observability features.

April 22, 2026

Stacklok and SUSE bring Linux infrastructure management to your AI agent

Managing Linux infrastructure at scale is hard enough without having to context-switch between your AI coding assistant and a web UI every time you need to check on a system. …

April 20, 2026

GitHub authorization for MCP servers

It’s easy to justify static credential configuration when an MCP server starts out as a one-user, one-server setup in a developer environment. But things quickly get complicated when that server …

April 06, 2026

MCP Optimizer is now built into the Stacklok platform

The MCP Optimizer is now built into vMCP, Stacklok’s multi-server gateway. Teams get 60–85% token reduction with no per-person setup required.