Stateless MCP on Aonan Guanhttps://oddguan.com/tags/stateless-mcp/Recent content in Stateless MCP on Aonan GuanAonan Guanhttps://oddguan.com/avatar.webphttps://oddguan.com/avatar.webpHugo -- 0.147.7en-usTue, 28 Jul 2026 00:00:00 +0000Your Session, My Policy: An MCP Gateway Session Reuse Bypass in Agentgatewayhttps://oddguan.com/blog/mcp-2026-07-28-agentgateway-session-authorization-bypass/Tue, 28 Jul 2026 00:00:00 +0000https://oddguan.com/blog/mcp-2026-07-28-agentgateway-session-authorization-bypass/Enterprise MCP gateways centralize authentication, routing, and tool authorization. Agentgateway versions before v1.4.0 let a session from one route reuse a sensitive backend under another route's permissive policy. Agentgateway v1.4.0 fixes the issue. MCP 2026-07-28 removes protocol sessions from the core.