MCP vs API: Why Traditional APIs Fail AI Agents
MCP vs API: Why Traditional APIs Fail AI Agents Traditional APIs fail AI agents. For years, developers built web apps using REST and GraphQL. These tools work well for humans. The…
GyaanSetu WebDev
Frontend, backend and devops for the modern web.
API Authentication: API Keys vs JWT vs OAuth 2.0
API Authentication: API Keys vs JWT vs OAuth 2.0 I once shipped an API without authentication. I thought it was a simple internal tool. Two weeks later, a competitor's bot scraped…
The Agent Can Drive. You Still Need to Know the Route.
The Agent Can Drive. You Still Need to Know the Route. Many people want to hand over a repository and a goal to an AI agent and walk away. They want total delegation. This is a tr…
Your Rate Limiter Is Not A Security Control
Your Rate Limiter Is Not A Security Control A bot pulled all the data for one passport from my API in minutes. My rate limiter did not stop it. The limit was 3,000 calls per month…
This Is How We Fixed Broken Blog Previews
This Is How We Fixed Broken Blog Previews I posted a link to our blog on X. The preview image looked wrong. Instead of a technical article image, it showed a sales banner. I check…
Why Half Your House Lost Power But No Breaker Tripped
Why Half Your House Lost Power But No Breaker Tripped You flip a switch and nothing happens. Half your outlets are dead. The other half work fine. You check your panel. Every brea…
A Width Check Broke a Kanji
A Width Check Broke a Kanji A name went into a terminal table and came out broken. The surname was 𠮷田. The first character is not the common 吉. It is 𠮷 (U+20BB7). This is a rare…
What Solo Skydiving Taught Me About Web Design
What Solo Skydiving Taught Me About Web Design Solo skydiving looks like one big moment. You open the door. You jump. You fall. People see that part in photos. They do not see the…
The AI Era: Democratizing the Ivory Tower
The AI Era: Democratizing the Ivory Tower History shows us that science is not always fair. For a long time, the academic world functioned as an exclusive club. This club often ig…
Test OAuth Recovery Emails Without Real Inboxes
Test OAuth Recovery Emails Without Real Inboxes Testing OAuth recovery emails the easy way creates security risks. Many teams send password reset links to a single shared mailbox.…
How to Deploy NestJS on Namecheap Shared Hosting
How to Deploy NestJS on Namecheap Shared Hosting Deploying NestJS to Namecheap shared hosting is not like deploying a static site or a PHP app. You cannot just upload files and ex…
The Nutrition Label That Software Always Lacked
The Nutrition Label That Software Always Lacked On December 9, 2021, a security researcher found a hole in a Java library called Log4j. Within 72 hours, hundreds of millions of sy…
Your Agent Didn't Break Prod. Your Pipeline Did.
Your Agent Didn't Break Prod. Your Pipeline Did. Your agent did not break production. Your pipeline did. Many teams use agents to open pull requests. They use CI to check for lint…
Testing Nodejs Digest Emails Without Inbox Noise
Testing Nodejs Digest Emails Without Inbox Noise Digest emails cause problems when preview environments send summaries to one shared mailbox. You lose track of which message belon…
What Defines a Day?
What Defines a Day? Programmers often focus on the wrong things when building new features. You might think about backend data, code duplication, or performance. These questions m…
Test Email Change Flows In React Without Mixing Up Links
Test Email Change Flows In React Without Mixing Up Links Changing an account email seems small. It is actually a major source of testing errors. Testers often mix up confirmation…
Zero to Production: FastAPI on Fly.io and GitHub Actions
Zero to Production: FastAPI on Fly.io and GitHub Actions You push code to main. Tests run. Your API goes live a few minutes later. This is how you build a professional deployment…
I Built a CAD Editor in the Browser, Then Taught an LLM to Use It
I Built a CAD Editor in the Browser, Then Taught an LLM to Use It I asked my app: "How many doors and windows are there?" The AI answered with the counts. Then it added something…
My CI/CD Pipeline Passed for 3 Months — Then I Read the Logs
My CI/CD Pipeline Passed for 3 Months — Then I Read the Logs Green checkmarks feel good. Every pull request passed. Every deploy worked. Then a user reported a broken feature. It…
Every Optimization Behind a Perfect Lighthouse Score
Every Optimization Behind a Perfect Lighthouse Score I run Lighthouse on my site constantly. It stays at 100 on every local run and 100 in Vercel's Real Experience Score. These sc…
Capabilities vs Tools in Agentic AI
Capabilities vs Tools in Agentic AI People often measure AI agents by the number of tools they use. They ask if an agent can browse the web, run code, or query a database. The log…
How Telegram Mini Apps Reduced Our Onboarding from 2 Minutes to 10 Seconds
How Telegram Mini Apps Reduced Our Onboarding from 2 Minutes to 10 Seconds I thought building my new game would be hard. I was wrong. The hard part was not the game logic or the a…
HTTP Just Got Its First New Method In 20 Years
HTTP Just Got Its First New Method In 20 Years You have likely done this before. You need to search for products. Your search filters are too large for a URL. To fix this, you use…
Why a ComboBox Is Not Enough
Why a ComboBox Is Not Enough You build business applications. You solve the same problems repeatedly. You build customer searches. You build product autocomplete fields. You build…