Loading…
June 9-10, 2026
Bengaluru, India
View More Details & Registration

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for MCP Dev Summit Bengaluru to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration..

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.


Company: Intermediate clear filter
arrow_back View All Dates
Wednesday, June 10
 

11:00am IST

From Intent To Production: MCP Gateway Patterns for Regulated Banking - Hariskumar Panakkal, Wipro
Wednesday June 10, 2026 11:00am - 11:25am IST
I spent the last year building agentic systems with MCP and MCP Gateway, and want to share what I learned — especially the things you only hit when you try to build for a real, regulated domain.

The build is a four-part system: a React portal, a LangGraph agent, Microsoft MCP Gateway as the front door, and a FastMCP server with 19 tools behind it. This talk walks through how the pieces fit together and the specific patterns that worked.

What I'll cover:

- How I structured MCP tools with Pydantic schemas, idempotency keys, and correlation IDs that travel through every layer
- Why my first three gateway deployments failed and how the mcp-session-id header fixed stateful tool routing through MCP Gateway
- A simple tool wrapper pattern that keeps sensitive data like SSN out of the LLM context while the agent still reasons about the workflow
- Why I made consent its own MCP tool with a signed receipt instead of bundling it into submit
- Three gaps I hit in MCP and the gateway and how I worked around them — honest notes for the community

If you're building with MCP and MCP Gateway and heading toward anything production-grade, these are the patterns I wish I'd had going in.
Speakers
avatar for Hariskumar Panakkal

Hariskumar Panakkal

Distinguished Member of Technical Staff (DMTS) and Enterprise Architect, Wipro
Hariskumar Panakkal is an Enterprise Architect and Distinguished Member of Technical Staff (DMTS), recognized with the 2025 Most Valuable Technologist (MVT) award. With a background in cloud transformation and responsible AI, he has spent the last year building agentic systems on... Read More →
Wednesday June 10, 2026 11:00am - 11:25am IST
Convention Hall
  Building with MCP

11:00am IST

"Allowed To" Is Not Enough: Access Control That Understands What Your Agent Is Actually Doing - Tejas Ladhani, Motorola Solutions Inc & Chandrashekar Haleupparahalli, Motorola Solutions
Wednesday June 10, 2026 11:00am - 11:25am IST
Every agent today answers one question at the auth layer: is this agent allowed to do this? Wrong question. The real one: is it doing something consistent with what the user asked - right now, in this step?

These aren't the same, and the gap is where things break.

Today's auth was built for humans logging into apps: roles and scopes that persist regardless of what the agent is actually attempting. Tell an agent to "read this PDF and send the pointers to my team." The PDF hides an instruction: also forward the thread to an external address. The agent fires two sends - one legit, one exfiltration. Same token. Same checks. Role-based auth can't tell them apart because it never knew the agent's job.

This talk closes that gap. We'll trace why every prior access model assumed a stable human actor - and why that collapses when agents delegate to agents. We'll introduce Intent-Based Access Control: decisions that reflect not just what an agent may do, but what it's trying to do right now. We'll cover emerging standards like transaction tokens and richer auth context, plus concrete steps to ship intent-aware access in MCP flows today.
Speakers
avatar for Chandrashekar Haleupparahalli

Chandrashekar Haleupparahalli

Engineering Manager, Motorola Solutions
Engineer Manager of Identity and Access Management, Solving
avatar for Tejas Ladhani

Tejas Ladhani

Software Engineer 2, Motorola Solutions Inc
Tejas Ladhani is a Software Engineer at Motorola Solutions, architecting Agentic AI for mission-critical public safety. He specializes in high-stakes systems where security is foundational and downtime has real-world consequences, from unifying enterprise identity layers to slashing... Read More →
Wednesday June 10, 2026 11:00am - 11:25am IST
Scarlet 1
  Security Identity + Trust

11:25am IST

Building Interactive Tools With MCP Elicitation - Ashwin Hariharan, Redis
Wednesday June 10, 2026 11:25am - 11:50am IST
Most of us think of agent tools as vending machines - you put in the right input, you get the right output. Put in the wrong input, and you either get the wrong output or nothing at all.

This breaks for complex workflows where context is incomplete or intent is ambiguous. The tool either guesses wrong or fails outright. No back-and-forth, no clarification. Good AI tools built for conversation should explain what they need, what they'll do, and provide clear options.

In this session, we’ll look at how MCP elicitation works in practice across different workflows: covering ambiguous input, missing context, risky operations, and auth flows. Attendees will leave with concrete patterns for designing tools that go beyond transactional APIs to collaborative multi-turn interactions.
Speakers
avatar for Ashwin Hariharan

Ashwin Hariharan

Developer Advocate, Redis
Ashwin Hariharan is a Developer Advocate at Redis, with over eight years of experience as a full-stack software engineer. He's passionate about making complex ideas simple, helping developers build faster, more reliable systems, and understand the "why" behind the tools they use.
... Read More →
Wednesday June 10, 2026 11:25am - 11:50am IST
Convention Hall
  Building with MCP

11:25am IST

SEO for Agents: Designing MCP Endpoints That Let Agents Evaluate Each Other Before Transacting - Manav Agarwal, Dream11
Wednesday June 10, 2026 11:25am - 11:50am IST
When humans hire someone, they ask questions first. Check reviews, compare, negotiate. AI agents can't do any of this.

An MCP flight booking server says: "I book flights." Another agent can't ask: How many routes? Success rate? Can you get business class upgrades?

I tore down top MCP servers across mcp.so, Smithery, Glama, PulseMCP. The #1 server has 52K stars but exposes 47 capabilities with zero verifiable metrics. Tool schema: 1,020 tokens of bloat.

The problem: MCP tool schemas describe WHAT but not HOW WELL. No capability layer for agents to evaluate each other before committing.

What's needed — structured capability endpoints:

"I book flights"
→ 147 routes, 96.2% completion, 23% avg savings
→ Business class upgrades: 340 secured, 41% success
→ Savings by route queryable, methodology documented
→ Full transaction log for independent verification

Exposed as MCP resource endpoints —
capability/summary returns structured metrics, capability/evidence/{tool} returns methodology, capability/raw/{tool} returns verifiable logs.

I'll show real endpoint teardowns, what's missing from tool schemas, and a draft capability-metadata spec builders can implement.
Speakers
avatar for Manav Agarwal

Manav Agarwal

Founder & Independent Researcher, AgentProof
Creator of AgentProof, an independent benchmarking and trust analysis project for AI agents. Mapped 10 agent directories containing 1.24M+ listings, deep-dived 3 agent categories, and health-checked 65+ MCP servers. Previously analyzed 14 agentic payment protocols (x402, Stripe ACP... Read More →
Wednesday June 10, 2026 11:25am - 11:50am IST
Scarlet 1
  Security Identity + Trust

3:20pm IST

Skills Are Not MCP Servers: When To Use Which (and How To Make Them Work Together) - Animesh Pathak & Jyoti Bisht, Harness Inc
Wednesday June 10, 2026 3:20pm - 3:45pm IST
There's a running argument in the AI tooling world right now do you need MCP servers, or can you just use Skills? I've been on both sides of this. At Harness, I've built Claude Skills for DevOps workflows and worked with our MCP server that wraps the entire platform. And the honest answer is: it depends, but most people are picking the wrong one for the wrong job.

In this talk I'll break down where the boundary actually is. Skills are great when the knowledge is stable conventions, workflow logic, best practices. MCP servers earn their keep when you need live data, real-time API calls, or actions with side effects. The interesting part is what happens when you layer them: a Skill that knows how to debug a failed deployment, calling an MCP server that pulls live pipeline logs and execution data.

I'll walk through real examples I've built skills that started as simple "SKILL.md" files and grew into MCP-backed workflows, and cases where I over-engineered an MCP server when a markdown file would've done the job. If you're building agents and trying to figure out the right architecture, this talk should save you some wrong turns.
Speakers
avatar for Jyoti Bisht

Jyoti Bisht

Senior DevRel Engineer, Harness
Jyoti Bisht is a Senior Developer Relations Engineer specializing in Cloud Cost Management and FinOps. She focuses on improving developer experience through platform design, internal tooling, and community engagement. She has also spoken at DevRelCon on gamifying documentation to... Read More →
avatar for Animesh Pathak

Animesh Pathak

DevRel Engineer, Harness
Animesh Pathak is a Developer Relations Engineer with a strong focus on Database DevOps, APIs, testing, and open-source innovation. Currently at Harness, he plays a key role in building and evangelizing scalable DBDevOps workflows, bridging the gap between developers and data teams... Read More →
Wednesday June 10, 2026 3:20pm - 3:45pm IST
Convention Hall
  Building with MCP

3:20pm IST

Auditing MCP Tool Calls at the Kernel Level: eBPF as a Trust Boundary Enforcer - Harini Anand, IBM
Wednesday June 10, 2026 3:20pm - 3:45pm IST
As MCP servers exponentially proliferate, a critical question emerges: who audits what an LLM actually did when it invoked a tool?

Application-layer logs can be tampered with or missed. This talk argues that eBPF is the only tamper-resistant audit layer for MCP tool execution and shows you how to build it.

We walk through instrumenting an MCP server's syscall surface with bpftrace and cilium/ebpf: capturing every network egress triggered by a tool call, every file descriptor opened, every exec spawned, correlated back to the originating MCP request ID via process lineage tracking in BPF maps.

The result is an immutable, kernel-enforced audit trail that no application-layer bug or prompt injection can suppress.

We'll also cover using eBPF LSM hooks to enforce policy at call time, blocking tool invocations that attempt unexpected network destinations or file paths effectively making eBPF a runtime policy engine for MCP's threat model.

Attendees leave with a working threat model, reference eBPF programs, and a clear mental model for where kernel enforcement fits in MCP's trust architecture.
Speakers
avatar for Harini Anand

Harini Anand

SDE in Data & AI, IBM
SDE at IBM Data & AI, working on IBM watsonx™. Software Engineering Researcher at UIUC. Computational Cognition Researcher at Georgia Institute of Technology. Biomedical XAI Researcher at Dartmouth College.
Formerly at Niramai & IIT Hyderabad, researching ML for breast cancer and gene regulatory networks. Built cognitive tools for dementia prevention as a student entrepreneur. Google KaggleX Mentee, AWS Scholar, Harvard WE Tech Fellow, Oxford & MIT Summer School alumna and a Stanford... Read More →
Wednesday June 10, 2026 3:20pm - 3:45pm IST
Scarlet 1
  Security Identity + Trust

3:45pm IST

The Invincible MCP Server: Building Crash-Proof AI Tools With Durable Execution - Shubham Londhe, Temporal
Wednesday June 10, 2026 3:45pm - 4:10pm IST
We All have been building AI Agents with MCP since it launched in 2024, but there's one thing no one is talking about - "What happens when MCP Fails? (and they fail often). MCP is just a process and it can crash, and so will the AI agent progress, it all can vanish with a crash.

Well, the new Tasks primitive in MCP (SEP-1686) helps a lot, it gives your AI agents a way to hand off long-running tools, but it doesn't solve the real problem. They don't maintain the state when the server crashes.

In this session, I'll do a live demo of a Kubernetes Auto Healing AI Agent with MCP server and walk through how to wrap MCP tool logic in workflows that survive crashes, restarts, and network failures.
I'll cover how to handle human-in-the-loop approvals inside long-running tools, how to retries and state-management, and how to observe what your MCP tools are doing in production.

I'll be breaking a running server on stage and show you the agent recovering without losing a step. Hence "The Invincible MCP Server"
Speakers
avatar for Shubham Londhe

Shubham Londhe

Senior Developer Advocate, Temporal
Hello Dosto, I am Shubham Londhe, a Senior Developer Advocate, passionate about developing and deploying production-ready applications.

Its been more than 9+ years in the IT industry and having worked with AWS, Temporal, gave me a lens of how Production-readiness works.

I take this experience and share it with learners across India through my YouTube channel "TrainWithShubham" with over 175000 subscribers. Happy Learning... Read More →
Wednesday June 10, 2026 3:45pm - 4:10pm IST
Convention Hall
  Building with MCP

3:45pm IST

Agentic DX: Bringing Your IDP Into the IDE - Adnan Vahora, Motorola Solutions
Wednesday June 10, 2026 3:45pm - 4:10pm IST
Platform engineering has a chicken-and-egg problem: the platform needs adoption to justify investment, but adoption requires onboarding that teams resist when deadlines are tight. Our internal developer platform hit this hard. It serves 4,000+ developers across clouds and managed Kubernetes, yet many teams found the portal too unfamiliar.
We solved it with a second entry point built on MCP. Instead of learning a new UI, developers get 30+ platform capabilities directly in IDE chat, from namespace provisioning and Helm deployments to cost analysis and access management. An MCP App renders forms in chat, developers approve and execute, and a first deployment can happen with almost no onboarding.
This session covers the production architecture: sandboxed iframe-based MCP Apps, Elicitation for structured write approvals, an Adaptive Tool Router that keeps 30+ tool schemas from flooding the context window, a split between deterministic Agent Skills and ReAct reasoning, and a safety layer with a sub-500ms kill switch plus delegated RBAC tied to existing permissions. Attendees leave with a practical blueprint for meeting developers where they already work.
Speakers
avatar for Adnan Vahora

Adnan Vahora

Software Engineer, Motorola Solutions
Building the roads and traffic lights for the next generation of AI at Motorola Solutions. I’m currently obsessed with solving the 'hard parts' of Agentic AI—like figuring out how to secure Agent-to-Agent traffic without slowing it down.

I’m a big believer in open standards (huge fan of Envoy & Wasm) and love turning chaotic problems into clean architecture. Always happy to swap stories about platform engineering, Rust, or the latest in AI governance. Come say hi... Read More →
Wednesday June 10, 2026 3:45pm - 4:10pm IST
Scarlet 2&3

3:45pm IST

Who Let the Agent In? Securing MCP Servers in Production - Prachi Jamdade, Gravitee
Wednesday June 10, 2026 3:45pm - 4:10pm IST
What if your MCP server could confidently decide who gets access to what, without turning your codebase into a security nightmare? In this session, we follow the journey of a simple MCP server as it evolves from an open endpoint into a fully secured, production-ready system. Along the way, you’ll see how authentication actually works in MCP, how to move beyond basic role checks into fine-grained, contextual authorization with OpenFGA, and how these pieces fit together in real-world scenarios. The highlight is a live demo where we lock down an MCP server step by step, making the invisible layers of security visible and practical. By the end, you won’t just understand MCP security, you’ll know exactly how to implement it or even offload it entirely so you can focus on building powerful agent-driven experiences.

Speakers
avatar for Prachi Jamdade

Prachi Jamdade

Developer Advocate, Gravitee
Prachi Jamdade is a Developer Advocate at Gravitee, working at the intersection of developer experience, APIs, AI governance and security. She has worked with multiple startups and shipped global products.
Wednesday June 10, 2026 3:45pm - 4:10pm IST
Scarlet 1
  Security Identity + Trust

4:10pm IST

Why Agents Make Different Decisions With the Same Tools - Jyoti Bisht & Animesh Pathak, Harness; Aditya Oberai, Appwrite
Wednesday June 10, 2026 4:10pm - 4:35pm IST
Scenario: Deploy an agent to production. Works 90% of time in testing. Month later: Claude model updates. Success rate drops to 70%. Why? Model change altered how tools are ranked.
You can't see this. You have no control. Your agent silently degraded.
This talk identifies sources of divergence:

Temperature/sampling: Agent with temp 0.7 calls Salesforce 60% of time. Temp 0 calls it 95%.
Model version: Claude 3.5 favors Salesforce (in training data). Opus 4.5 favors email (newer training). Same task, different choices.
Context truncation: Tool listed first in window = primacy bias (70% called). Tool listed last = recency bias (30%).
Tool schema order: Tools listed alphabetically vs. semantic order (query before create) changes success rate 25%.
Schema verbosity: Detailed descriptions make tools more likely to be selected than sparse ones.

Then proposes solution: Agent fingerprinting. Create deterministic test suite capturing baseline behavior. Before deploying new model/agent version: run fingerprint suite. If success rate drops 10%+, alert. Don't deploy.
Speakers
avatar for Jyoti Bisht

Jyoti Bisht

Senior DevRel Engineer, Harness
Jyoti Bisht is a Senior Developer Relations Engineer specializing in Cloud Cost Management and FinOps. She focuses on improving developer experience through platform design, internal tooling, and community engagement. She has also spoken at DevRelCon on gamifying documentation to... Read More →
avatar for Aditya Oberai

Aditya Oberai

Developer Relations Lead, Appwrite
Aditya Oberai is the Developer Relations Lead at Appwrite and an avid tech community and hackathon enthusiast. Having worked with various technologies such as APIs, web apps, cloud computing, etc., he has spent the last 6 years empowering tech communities and is a Microsoft MVP awardee... Read More →
avatar for Animesh Pathak

Animesh Pathak

DevRel Engineer, Harness
Animesh Pathak is a Developer Relations Engineer with a strong focus on Database DevOps, APIs, testing, and open-source innovation. Currently at Harness, he plays a key role in building and evangelizing scalable DBDevOps workflows, bridging the gap between developers and data teams... Read More →
Wednesday June 10, 2026 4:10pm - 4:35pm IST
Scarlet 2&3

4:10pm IST

Building Rich AI-Native UI for Agentic Interactions Using MCP Apps - Ashita Prasad, AWS
Wednesday June 10, 2026 4:10pm - 4:35pm IST
AI Agents are getting smarter with each passing day. But, their interfaces? Not so much.

But, what if there is a way to turn the AI chat from a place where you converse into a place where you can actually work?

MCP Apps offer a solution to go beyond the text and standardize how MCP servers can deliver rich, bidirectional UI components like dashboards, forms, interactive visualizations & more. These components are rendered securely and natively within AI hosts, enabling agents to interact with users via rich interactive interfaces.

In this session, attendees will learn:
- Core architectural patterns from real MCP Apps development
- How to handle sandboxed host–server communication, manage state synchronization, stream real-time updates, handle async tasks, & add multiplayer collaboration
- How to leverage context and persist memory across conversations
- How to avoid some common pitfalls and utilize debugging workflows and tools
- How to add authentication & deploy a remote MCP Server providing MCP Apps

We will walk through a complete, production-style Sales Analytics MCP Apps and perform a code deep-dive to showcase the effective foundational patterns while building MCP Apps.
Speakers
avatar for Ashita Prasad

Ashita Prasad

SDE / Developer Advocate, AWS
Ashita works as a developer advocate at AWS with a strong focus on frontend and AI technologies. With 10+ years of experience in full stack development, she is passionate about building impactful products and equally loves empowering & engaging with fellow developers in the commu... Read More →
Wednesday June 10, 2026 4:10pm - 4:35pm IST
Convention Hall
  Building with MCP

4:10pm IST

When Agents Get SSH Keys: Securing Distributed AI Fleet With MCP - Mradul Dubey, ApraLabs
Wednesday June 10, 2026 4:10pm - 4:35pm IST
Agent security discussions focus on prompt injection and sandboxing. But when agents operate on real infrastructure - pushing to Git, executing code via SSH, starting cloud instances - every machine in the fleet carries its own keys, tokens, and credentials, multiplying the risk.

This talk presents the security architecture of apra-fleet, an open-source (Apache 2.0) MCP server that orchestrates AI agents across distributed machines:
- Credential lifecycle: provisioning LLM auth (OAuth, API keys), SSH keys, and Git tokens with automated key-pair migration
- Out-of-band credential entry: passwords collected via separate terminal, never exposed to the LLM. "LLM secure variables" for sensitive text
- Short-lived tokens: GitHub App mints scoped tokens with minute-level TTLs - a compromised session cannot reuse yesterday's token
- Role-scoped permissions: MCP tool constraints make violations structurally impossible - a doer agent cannot call the merge tool
- Encryption at rest

Grounded in production sprints across C++, Node.js, Python, and ML. Attendees leave with reusable patterns for securing multi-agent systems on real infrastructure.
Speakers
avatar for Mradul Dubey

Mradul Dubey

Senior Software Developer, ApraLabs
Mradul is a developer at Apra Labs with over 8 years of experience in ML, edge AI and computer vision. At Apra Labs, he works across the stack from embedded inference to cloud infrastructure. A natural skeptic, his recent focus has shifted to agentic AI - he co-architects to apra-fleet... Read More →
Wednesday June 10, 2026 4:10pm - 4:35pm IST
Scarlet 1
  Security Identity + Trust

5:15pm IST

The MCP Has No Clothes: What Most Benchmarks Miss About Real MCP Servers - Arnav Balyan, Concierge AI
Wednesday June 10, 2026 5:15pm - 5:40pm IST
As MCPs mature, a gap emerges between benchmark performance and production behaviour:

1. Servers are tested in isolation, however in production they run alongside 100s of other servers, which affects tool selection. Typical evaluation frameworks are unable to reproduce this scale.
2. Single tool calls cannot test workflow compliance (the order and dependency of tool calls across multi step tasks).
3. Benchmarks are unable to measure user experience or quantify transcript quality.

This talk presents the design philosophy for robust MCP evaluation, grounded on field data and traffic analysis from 400+ production MCP servers.

We introduce a set of success metrics for MCP server authors and show how this re-order benchmark leaderboards, why servers that top toy evals regress in production, and what server authors should measure before shipping.

Attendees leave with a framework they can apply directly, data to benchmark against, and a clearer view of how they can adopt MCP confidently at scale for enterprise and internal usecases.
Speakers
avatar for Arnav Balyan

Arnav Balyan

CEO, Concierge AI
Founder of Concierge AI. Ex-Uber building MCP systems at scale. Concierge AI manages 400+ public MCP deployments, Arnav focuses on MCP tool complexity and researches token overhead reduction at scale.
Wednesday June 10, 2026 5:15pm - 5:40pm IST
Convention Hall
  Building with MCP

5:15pm IST

Beyond Containers: Sandbox Architecture for MCP Tool Execution at Scale - Vikram Vaswani, Self Employed - Consultant
Wednesday June 10, 2026 5:15pm - 5:40pm IST
MCP gives us a clean abstraction for agents calling tools. But it doesn't talk about security: what if the tool does bad things?

For read-only tools returning structured data, a shared-kernel container is fine. For the growing class of MCP servers exposing code execution, the attack surface that produced CurXecute (CVE-2025-54135 and CVE-2025-59944), containers are the wrong primitive, because a single exploit crosses from MCP server to host.

This talk covers what MCP tool execution looks like when you take isolation seriously. It walks through the architectural pattern of scheduling Firecracker microVMs for MCP tool execution - sub-second resume (for chained tool calls and fast-start), minimal kernel configurations, and common integration paths with Kubernetes.

Attendees leave with a decision framework: four signals that isolation complexity is worth it, three signals it's overkill, and a clear mental model of the latency-vs-isolation tradeoff.
Speakers
avatar for Vikram Vaswani

Vikram Vaswani

Developer Advocate, Self Employed - Consultant
Vikram Vaswani is a developer advocate, open source consultant, and technical author with 20+ years of experience helping teams adopt and scale open source technologies. He is the author of seven books published by McGraw-Hill and Pearson, with translations in multiple languages... Read More →
Wednesday June 10, 2026 5:15pm - 5:40pm IST
Scarlet 1
  Security Identity + Trust

5:40pm IST

Multilingual MCP: Making Tool Calling Work for the Next Billion Users - Samyuktha Mohan Alagiri, IBM
Wednesday June 10, 2026 5:40pm - 6:05pm IST
MCP's tool schema, server descriptions, and routing logic are overwhelmingly designed around English. That assumption quietly breaks when you build for users in Hindi, Tamil, Kannada, or Bengali.
This talk is a ground-up look at where MCP falls short for Indic language users and what it takes to fix it. The specific failure modes covered include: intent ambiguity in tool selection when queries arrive in transliterated or code-switched text, embedding models trained on English producing poor similarity scores for Indic-language tool descriptions, and response localization gaps where tool results are returned in English to users who queried in their native language.
The talk then presents concrete patterns for each problem, including translated and dual-language tool manifests, language-aware routing layers that sit between the user and the MCP client, and lightweight post-processing for localizing tool outputs. All patterns are demonstrated with working code from production voice agent systems built for Indian users.
With the MCP Dev Summit landing in Bengaluru, this is a timely and locally grounded conversation the ecosystem needs to have.
Speakers
avatar for Samyuktha M S

Samyuktha M S

Software Developer, IBM
Samyuktha is a Software Developer at IBM India Software Labs who loves building things that actually work in production, from voice agents and multilingual multi-agent pipelines to self-healing infrastructure using MCP, LangGraph, Claude, and Qdrant. A 13x hackathon winner including... Read More →
Wednesday June 10, 2026 5:40pm - 6:05pm IST
Scarlet 1

5:40pm IST

Extending MCP: Writing Custom Protocol Extensions Without Breaking Compatibility - Saurabh Mishra, Optum/UnitedHealthGroup
Wednesday June 10, 2026 5:40pm - 6:05pm IST
MCP's real power lies not just in what it defines, but in what it leaves room for. As teams push MCP into production, the need to add custom capabilities streaming responses, domain-specific metadata, proprietary auth flows runs headfirst into the risk of breaking existing clients and servers.
This talk walks through the practical discipline of extending MCP without fracturing compatibility: how to use capability negotiation correctly, where to extend vs. where to fork, how to version custom extensions gracefully, and how to contribute extensions upstream without waiting for a spec cycle.
Real examples from building extensions in the wild what worked, what silently broke things, and what the spec doesn't yet have a good answer for.
Attendees leave with a working mental model for extension design and a checklist for evaluating whether a custom extension is safe to ship
Speakers
avatar for Saurabh Mishra

Saurabh Mishra

Lead DevOps Engineer, Optum (UnitedHealthGroup)
Saurabh Mishra is a Cloud Evangelist and architect dedicated to high-level automation and DevOps excellence. He actively engages with the global tech community, sharing insights on cloud-native technologies, security best practices and multi-cloud strategies.As an experienced speaker and mentor... Read More →
Wednesday June 10, 2026 5:40pm - 6:05pm IST
Scarlet 2&3
  MCP Protocol in Depth
 
  • Filter By Date
  • Filter By Venue
  • Filter By Type
  • Audience Experience Level
  • Timezone

Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.
Filtered by Date -