Hi, I'm Den 👋

Tinkerer, Nerd, Pixel Geek.

I am a super-technical product engineer who is all about solving complex technical problems, reverse-engineering things, and documenting my experiences. Some of the highlights include:

🚧 Helping secure and build developer tools and AI-powered experiences that make engineers more productive.
🎙️ Recording a podcast where I talk to notable folks about unconventional career paths.
☕ Building a utility to keep your Windows machine awake.
🌱 Growing a list of resources to help product managers get better.
🪐 Maintaining a Halo-related hobby project.
🪨 Tinkering with USB protocols from a popular button box.

You can read more about my work and more on the About page.

Recent

Visual Studio Code Now Supports MCP Authorization

May 26, 2025·399 words

See how the latest Visual Studio Code Insiders builds seamlessly integrate with both new and legacy MCP authorization specs, offering a frictionless developer experience for accessing protected MCP servers with any OAuth provider.

Preventing Confused Deputy Attacks In MCP With Azure API Management

May 25, 2025·1755 words

Learn how to protect Model Context Protocol (MCP) servers from confused deputy attacks when implementing Dynamic Client Registration, and how Azure API Management can help mitigate these security risks.

The New MCP Authorization Specification

April 26, 2025·780 words

A super-quick overview of the new MCP authorization specification and how it improves security and flexibility for MCP servers.

Better Logic For Showing Auth Windows With Your Local MCP Server

April 21, 2025·1309 words

Fix that annoying issue where authentication windows appear behind your MCP client by implementing smarter window handle discovery. This walkthrough shows you how to properly parent WAM dialogs to VS Code, Claude Desktop, and other MCP clients.

Secure Remote MCP Servers With Entra ID And Azure API Management

April 20, 2025·3698 words

Implement secure, enterprise-ready Model Context Protocol (MCP) servers protected by Entra ID authentication using Azure API Management and Azure Functions. This complete guide walks you through creating a confidential client architecture that protects sensitive tokens while enabling secure LLM tool access.