api

See how the latest Visual Studio Code Insiders builds seamlessly integrate with both new and legacy MCP authorization specs, offering a frictionless developer experience for accessing protected MCP servers with any OAuth provider.

Learn how to protect Model Context Protocol (MCP) servers from confused deputy attacks when implementing Dynamic Client Registration, and how Azure API Management can help mitigate these security risks.

A super-quick overview of the new MCP authorization specification and how it improves security and flexibility for MCP servers.

A little experiment in using GitHub Copilot REST APIs inside GitHub Actions to avoid manually parsing text bodies.

Recently, I’ve been running a lot of GitHub Actions. Primarily because I automated some data collection for my Halo Infinite projects, and as part of that I get a lot of workflow logs. I wanted to clean them up.

An outline of how you can extract icons from Windows binaries and dump them into a local folder.

I’ve talked before about Microsoft Authentication Library (MSAL) for .NET on this blog, but I feel like I should bring attention to another product that our team ships that is massively adopted in the community - MSAL Python.

As I was building OpenSpartan Workshop for Windows I needed the ability to convert a hexadecimal HTML color code to a SolidColorBrush object. Unlike with previous UI frameworks, WinUI 3 (which is what I use) doesn’t have a built-in construct for this kind of conversion. Naturally, I had to improvise.

As part of the work on OpenSpartan Workshop I needed the capability to convert a Xbox gamertag into its immutable identifier - the Xbox user ID, also commonly known as the XUID. My plan was to add the option for someone to find all the matches where they played with a specific player.

OK, look - I am not the one to tell you that you absolutely have to track your stats for a damn video game, but I am the kind of person that finds a certain fun in that, just like I find the fun in reverse-engineering the entire Halo Infinite API. There is a certain beauty in looking at your own numbers, even if they are for some meaningless, entirely made-up progression system.