▲ 3 r/mcp

How do you handle MCP tool access control for internal tenants in an enterprise platform?

If you use FastMCP for your MCP servers have you found stateless_http=True to be stable in production, or do you keep stateful sessions for anything?

reddit.com
u/SmartWeb2711 — 3 days ago
▲ 7 r/AZURE

Microsoft Foundry as LLM Gateway

Do you usr Microsoft Foundry as your LLM gateway? I would like to understand if you use Foundry for this use case .

reddit.com
u/SmartWeb2711 — 3 days ago

Central MCP Gateway

We are building an internal developer platform . The platform has a central API Gateway FastAPI (we call it MCP Gateway) that sits in front of multiple backend microservices (we call them MCP Servers using FastMCP ). Tenants (internal application teams) call tools exposed by these backend servers through the gateway.

The gateway handles all authentication and authorization. Backend servers trust the gateway and do no auth themselves.

Context:

Backend servers run as Kubernetes pods (EKS)

Gateway dispatches to backends via internal cluster DNS

All tools are AWS-related operations

Some tools are read-only (safe for automation), some are write operations (should be human-initiated only)

We enforce tier-based access control (read-only tier, write tier, governance tier) at the gateway

Tenants are identified by their AD group memberships extracted from JWT claims

Account-level eligibility is derived from AD groups at request time

Looking specifically for: contract requirements between gateway and backend (what the backend must expose/accept), operational requirements (health, reliability), security requirements (secrets, network, IAM), and data handling requirements. What kind of baseline you have set it up ?

what the tool must and must not return or log

reddit.com
u/SmartWeb2711 — 4 days ago
▲ 2 r/MCPservers+1 crossposts

Central MCP Gateway

We are building an internal developer platform . The platform has a central API Gateway FastAPI (we call it MCP Gateway) that sits in front of multiple backend microservices (we call them MCP Servers using FastMCP ). Tenants (internal application teams) call tools exposed by these backend servers through the gateway.

The gateway handles all authentication and authorization. Backend servers trust the gateway and do no auth themselves.

Context:

Backend servers run as Kubernetes pods (EKS)

Gateway dispatches to backends via internal cluster DNS

All tools are AWS-related operations

Some tools are read-only (safe for automation), some are write operations (should be human-initiated only)

We enforce tier-based access control (read-only tier, write tier, governance tier) at the gateway

Tenants are identified by their AD group memberships extracted from JWT claims

Account-level eligibility is derived from AD groups at request time

Looking specifically for: contract requirements between gateway and backend (what the backend must expose/accept), operational requirements (health, reliability), security requirements (secrets, network, IAM), and data handling requirements. What kind of baseline you have set it up ?

what the tool must and must not return or log

reddit.com
u/SmartWeb2711 — 4 days ago

looking for site where i can apply for freelance work/remote

hello experts, Can you guide me where i can apply for freelance work on IT from poland ,

reddit.com
u/SmartWeb2711 — 6 days ago

OPTION TRADING IN europe

hello 👋 folks , hope you are doing good ? is there any news for option trading features enable in trading212 ?
i don’t like IBKR due to complex platform. any other simpler option do we have similar like robinhood ?
i am from poland

reddit.com
u/SmartWeb2711 — 8 days ago

Pytanie o IKE/IKZE w XTB dla obcokrajowca pracującego w Polsce

Cześć,
Mam pytanie o inwestowanie przez XTB, szczególnie przez IKE lub IKZE.
Jestem obcokrajowcem z Indii, mieszkam i pracuję w Polsce jako specjalista IT. Płacę podatki w Polsce.
Czy ktoś wie, czy jako obcokrajowiec mogę normalnie korzystać z IKE/IKZE w XTB? Jak wygląda wtedy kwestia podatków? Czy trzeba płacić podatek Belki? I czy można wypłacać pieniądze od czasu do czasu, czy lepiej nie ruszać tych środków przed emeryturą?
Zastanawiam się też, czy w mojej sytuacji lepiej inwestować przez zwykłe konto maklerskie, czy przez IKE/IKZE.
Będę wdzięczny za każdą poradę.

reddit.com
u/SmartWeb2711 — 9 days ago

which stockbroker do you use for trading, and which one for investing

Hello, which broker from Poland do you use for trading, and which one for investing?

reddit.com
u/SmartWeb2711 — 29 days ago
▲ 9 r/AZURE

How do you manage RBAC at scale in your Azure Landing Zone? Group-based vs PIM vs automation

We're now designing a group-based model . (on-prem AD groups synced to Entra, group assigned to subscription role via Terraform, users request membership via self-service with approval)

How do you manage?
do you use a flat structure like AZ_{sub-name}_RL_{Role} or something hierarchical?

we want on-prem so offboarding automatically strips membership. Anyone doing cloud-only groups and solving the offboarding gap differently

are you using PIM for eligible assignments instead of/alongside groups?

reddit.com
u/SmartWeb2711 — 1 month ago

z którego brokera giełdowego korzystasz do handlu, a z którego do inwestowania

Witam, jakiego brokera z Polski używasz do tradingu, a którego do inwestowania?

reddit.com
u/SmartWeb2711 — 1 month ago
▲ 11 r/AZURE

Microsoft Foundry setup in Production

Have you setup foundry on your landing Zone ? What is the use case your are solving ? any production grade architecture you suggest?

reddit.com
u/SmartWeb2711 — 1 month ago

Qwen3-35B-A3B What is the Mac 🖥️ laptop configuration i need

To run a Qwen3-35B-A3B Local model which Mac configuration i need to run atleast

reddit.com
u/SmartWeb2711 — 2 months ago