Building an AI Firewall: Three Things I Learned While Securing MCP (blog.costa.security)

If you are building or using AI agents, three critical lessons I learned:

1. There is no "best" model or tool 2. Build for today's ecosystem (stdin/stdout), not tomorrow's (SSE) 3. MCP is stateful — and that is going to change *everything*