MCP

By Greg Nowak, 29 June, 2026

Agent-ready APIs need a contract audit before MCP rollout

Before exposing internal APIs through MCP, review contracts, tool metadata, auth scopes, consent, and failure paths so agents can act safely.

ChatGPT Apps and Full MCP Access Put Governance Front and Center

With ChatGPT apps and full MCP access rolling into workspace plans, the issue shifts from connectivity to governance: permissions, write actions, OAuth, review, and rollout.

Tags

MCP

Review Greg on Google

WordPress Speculative Loading Needs a Cart, Analytics, and Cache Test

2026-06-24

WordPress 6.8 adds cautious speculative loading. Before enabling stronger prerendering, test cart state, analytics, personalization, and cache load.

ChatGPT Is Becoming Office Software: Put Admin Hygiene First

2026-06-24

ChatGPT now has files, sessions, apps, and scheduled work. Treat it like office software: audit access, clean up retained data, and limit risk.

Search Console Can See Social Posts—Your Reports Need a New Map

2026-07-13

Search Console now reports how social posts perform across Google. Here’s a practical way to manage properties, permissions, baselines and exports.

Hand-drawn sketch infographic summarizing: WordPress Now Speaks AI; Plugins Still Need Real Guardrails

WordPress 7.0 Has an AI Client. Plugins Need Their Own Guardrails

2026-07-12

WordPress 7.0 standardizes how plugins call AI providers, while leaving developers responsible for access control, cost limits, capability checks and graceful failures.

AI images need a media-library audit before they reach clients

2026-06-24

AI-generated images can carry provenance signals, but CMS resizing, plugins, and CDNs may change them. Audit the media path before delivery.

AI disclosure rules belong in the CMS, not a spreadsheet

2026-06-26

AI-assisted publishing needs visible disclosure choices, review evidence, and SEO checks inside the CMS, not in a side spreadsheet.

The risky part of AI workflow pilots is often the OAuth screen

2026-06-26

AI workflow pilots can fail at the access layer. Review OAuth scopes, API keys, service accounts, and revocation paths before launch.

AI crawler permissions now belong in a licensing register

2026-06-27

AI crawler controls now affect search visibility, AI answers, model training, and licensing. A register keeps policy, evidence, and enforcement aligned.

Google’s AI Search toggle needs a test plan, not a gut decision

2026-07-11

Google’s AI Search control creates a measurable publishing choice. Test visibility, traffic and leads before changing the setting across your site.

WordPress headless menus need an exposure check before launch

2026-06-28

WordPress 6.8 helps headless builds expose menu data through the REST API, but agencies should review exactly what becomes public before launch.