Blog

ToolHost Blog

Engineering notes on MCP, tool governance, and production AI infrastructure.

Architecture
Why We Built the ToolHost MCP Gateway in Go

Memory safety, low latency, a strong concurrency model, and a first-class MCP SDK. Here's the reasoning behind the tech stack.

Read more →
Operations
From stdio to HTTPS: Wrapping Local MCP Servers for Production

Most MCP servers are stdio processes — great for local use, not for multi-user production deployments. The ToolHost Connector Runtime bridges the gap.

Read more →
MCP
MCP Stateless Mode: What It Means for Load-Balanced Deployments

The 2026-07-28 MCP RC removes the session handshake entirely. Here's what that means for gateway operators today.

Read more →
Security
TOFU Schema Pinning: How ToolHost Stops CVE-2025-54136-style Attacks

Tool schemas can change silently. A schema update that adds a new parameter becomes an injection surface. TOFU pinning catches it before it reaches the model.

Read more →
Security
Why Token Passthrough Is a Security Hole in MCP Deployments

Most MCP gateway implementations forward the downstream bearer token upstream. Here's why that's dangerous and how ToolHost fixes it with per-upstream credentials.

Read more →