Bobby DeSimone

@pomerium_io

[Pomerium @pomerium_io]

Using a hosted MCP server you don't control, like Linear or Notion? It enforces its own OAuth. Pomerium handles the upstream flow, sets your access policies on its tools, and proxies tool calls with valid tokens. Clients only ever hold a Pomerium token, never upstream creds.

[Pomerium @pomerium_io]

LLMs just take a prompt and return text. Tool calling let them hit external systems, but you wired up every hook by hand. MCP is the next step: a universal plugin interface for agents, now in the major LLM APIs and across coding agents.

[Pomerium @pomerium_io]

The doors are open! Come say hey at booth 986! #KubeCon

[Pomerium @pomerium_io]

See you at KubeCon in Amsterdam. Stop by booth 986 for some Amsterdam swag. #KubeCon

[Pomerium @pomerium_io]

Come find us at booth 986 at @KubeCon_ next week. We'll be talking native SSH, securing MCP servers for AI agents and more. See you in Amsterdam!

[Nick Taylor @nickytonline]

And we're live! Come hang with my coworker Denis and me as we dig into MCPs as well as the new updates for MCP support in @pomerium_io! 👀

https://t.co/dYhSIfAi73

[Nick Taylor @nickytonline]

First PR to @openclaw! 😅🦞

https://t.co/jlUqIRvhxH

[Bobby DeSimone @bdd_io]

bout killed me to not make the "I only respond with "you are absolutely right" anyway joke.

in seriousness, idk how I feel about the security of open claw yet, but you should at least run it behind something like pomerium. we wrote a guide.

https://t.co/40snFJPO3P

[Bobby DeSimone @bdd_io]

Every OpenClaw / Clawd post be like:

Rewrote GoldenEye in JS in 36 hours.
Outsourced texting my wife.
Delegated journaling.
No thoughts left; Just vibes.
Absolute game changer. 🦀

See how.🧵👇

[Bobby DeSimone @bdd_io]

@dhh I'm usually bullish on self-hosting but without GPUs it's... very painful. "Thought for 4 minutes" to say hello.

156 cores, 336GB RAM , 10.5TB NVMe across 9 bare metal nodes and this is the best I get...

[Bobby DeSimone @bdd_io]

@nickytonline I was told the Zamboni is the unofficial Canadian state bird. Confirm or deny

[Nick Taylor @nickytonline]

Excited to see this land soon in @pomerium_io core. 👀

https://t.co/LcqAQVooNc

#mcp #oauth

[Bobby DeSimone @bdd_io]

@neilsuperduper accurate because all it takes is one zergling to slip by your wall to infiltrate your mineral lines which is kinda how mcp tool calls feel rn

[Bobby DeSimone @bdd_io]

@thdxr <insert joke about how all of them because auth is hard>

- https://t.co/sF1rpXUF2w
- https://t.co/pfyu0VN2lg

[Andrej Karpathy @karpathy]

I've never felt this much behind as a programmer. The profession is being dramatically refactored as the bits contributed by the programmer are increasingly sparse and between. I have a sense that I could be 10X more powerful if I just properly string together what has become available over the last ~year and a failure to claim the boost feels decidedly like skill issue. There's a new programmable layer of abstraction to master (in addition to the usual layers below) involving agents, subagents, their prompts, contexts, memory, modes, permissions, tools, plugins, skills, hooks, MCP, LSP, slash commands, workflows, IDE integrations, and a need to build an all-encompassing mental model for strengths and pitfalls of fundamentally stochastic, fallible, unintelligible and changing entities suddenly intermingled with what used to be good old fashioned engineering. Clearly some powerful alien tool was handed around except it comes with no manual and everyone has to figure out how to hold it and operate it, while the resulting magnitude 9 earthquake is rocking the profession. Roll up your sleeves to not fall behind.

[Shawky @ShawkyMesbah]

this is the infrastructure layer devs dont want to think about but absolutely need. reverse tunnels, tls certs, public endpoints - all solved with one ssh command

mcp is becoming critical infra and you just removed every excuse not to ship. no ngrok account no setup just ssh and youre live across chatgpt claude gemini

the fact that its just ssh is genius. every dev already has it no new tools to learn

[Bobby DeSimone @bdd_io]

We just shipped Hosted Clusters in Zero (beta) for MCP and agentic access. Just run:

`ssh -R 0 https://t.co/c4RxtVBFZW`

in any terminal and you've got a reverse tunnel & public access point that any public model (ChatGPT, Gemini, Claude) can access. Amazing for dev.

→ instant public HTTPS URL
→ no client to install (vs ngok, funnel) / no TLS to setup / it's just ssh
→ works great w/ ChatGPT's Apps SDK

docs: https://t.co/Oe9ZEMhNMU

Happy holidays 🎄

[IT Unprofessional @it_unprofession]

Last week I hosted family for Thanksgiving.

My 12-year-old nephew asked for the WiFi password.

He wanted to play Roblox on his iPad.

I looked at the device.

Unmanaged. No antivirus. No encryption.

I’m an IT Professional. I don't run an open network.

So I didn’t give him the password.

Instead, I spent 45 minutes provisioning a Guest VLAN.

I set up a captive portal.

I throttled the bandwidth down to 56kbps.

Then I blocked all traffic on ports 80 and 443.

He came back crying. He said it wouldn't load.

My sister screamed at me to "just let him play."

I told her that Zero Trust architecture doesn't care about bloodlines.

We didn't have a "fun" Thanksgiving.

But we had a secure perimeter.

You’re welcome for the compliance.

[Pomerium @pomerium_io]

Pomerium v0.31 is out!

- Self-healing file-based databroker
- Enhanced health checks
- MCP support in Pomerium Zero

https://t.co/PWMfRSQPd7

#mcp #aigateway #healthchecks #k8s #devops

[Nick Taylor @nickytonline]

Got the @grafana MCP server set up in my k8s cluster in my home lab configured with a Grafana service account token, set to read-only mode and leveraging @pomerium_io for fine grained dynamic access policies to restrict tool calls based on context. 🔥

Cluster is healthy. 🩺