Harness EngineeringMCP Token Audience Validation: A Worked Denial Case
Validate an MCP token for the receiving service as well as its issuer, expiry and scope. Test wrong-audience denial before protected work executes.
Rod Rivera

2 entries and 1 thought filed under this tag.
A connector can expose more operations than the task needs. A tool that reads a customer record may sit beside another that updates or deletes one. Before using an MCP server with Claude Code, inspect the actual tools…
Learn
Save your progress with a free account.
Checking sign-in…
Cookie duty
The one he did not eat is a measurement cookie. Say yes and the site loads Google Analytics (GA4), which stores an identifier in your browser and lets us count which lessons get read.
Change your mind any time with Privacy choices in the footer. Read the Privacy Policy
Optional · newsletter
That is saved and settled. Separately, and this is marketing rather than measurement: Rod writes a weekly email — one lesson, one field note — sent through Kit. It has nothing to do with cookies, and skipping it costs you nothing.
We will send a confirmation email. Click the link in it and the next lesson finds you.