Guide

Gemini CLI Is No Longer Free: What Changed and Where to Go

Google ended the free individual tier on June 18, 2026 and pushed users toward a binary-only Antigravity CLI. What actually changed, and your options.

Guide

MCP Enterprise-Managed Authorization (EMA): Zero-Touch OAuth, Explained

MCP's Enterprise-Managed Authorization shipped stable on June 18, 2026. One SSO login authorizes every remote MCP server via ID-JAG, no per-server consent.

Benchmark

typed vs Opus 4.8: a coding head-to-head

Same Claude Code, two backends, every task graded by a real test suite. We looked hard for a quality difference on medium-to-hard coding -- and report what we found.

Announcement

mcp.hosting is now Yaw MCP

Same architecture, new name, bigger remit. One CLI fronts every MCP server you use and keeps the tool surface out of your context window until you ask for it.

Opinion

The Postgres MCP everyone is still using has a known SQLi

~500,000 monthly downloads of a deprecated Postgres MCP server with a published stacked-query SQLi the BEGIN READ ONLY wrapper does not catch. Why string-parser defenses lose, the structural fix via the extended query protocol, and a drop-in replacement that ships it.

Comparison

An Alternative to the Official AWS MCP Server

AWS just GA'd their MCP server. Here is a Node-only alternative with device-code SSO re-login that survives Windows browser-handoff drops, CCAPI CRUD with dry-run diffs, multi-region fan-out, IAM pre-flight checks, and a JS scripting sandbox.

Announcement · updated May 13

typed: A Claude Code-Compatible Backend With No 5-Hour Limits

An Anthropic-API-compatible backend for Claude Code -- more volume per dollar, cheaper extra usage, monthly billing instead of 5-hour reset windows. One curl installs the launcher; then run t (or typed) from any project directory. Honest comparison at typed.cloud/migrate.

Announcement · updated July 21

Building MCP Servers in Production: The Book Is Out

Twelve chapters of practitioner-grade MCP server engineering, drawn from shipping thirteen @yawlabs/* servers. Protocol, transport, schema, auth, error handling, hosting, security, four case studies. Free to read online, no signup. PDF and EPUB free too.

Guide · updated July 7

Claude Code Yaw Mode

An opinionated overlay for Claude Code: 22 rule files, 23 slash commands, dispatch sub-agents, safety hooks, and typed.cloud backend support. How the per-session overlay works without ever touching your real ~/.claude.

Guide

Grading MCP Servers A to F: 88 Tests Against the Spec

MCP joined the Linux Foundation. 88 tests across 8 categories grade any MCP server A to F in 30 seconds. Open methodology, CC BY 4.0.

Guide

Five Tailscale Audits I Now Answer in One Prompt

Five real audit questions - stale devices, "who broke DNS at 2am," ACL diffs, OIDC subject drift, key rotation - and how an agent composes the API calls to answer each in one turn. Plus the four design choices that keep it from turning into a footgun.

Guide

Local vs Remote MCP Servers: When Each One Is Right

The honest tradeoff between local and remote MCP servers. When to run each, why the distinction matters for AI agents and teams.

Tutorial

Getting Started with MCP: Connect Your AI to Your Tools in 10 Minutes

What MCP is, why it matters, and a 10-minute walkthrough that connects your AI assistant to files on your machine. Works in Claude Desktop, Cursor, VS Code with GitHub Copilot, and any other MCP client.

Guide

The MCP Server Security Checklist: 10 Practices for Production

SSRF defense, credential handling, tenant isolation, rate limiting, dependency pinning, and more - the 10-point checklist for hardening an MCP server before it goes to production.

Tutorial

How to Test an MCP Server for Spec Compliance in One Command

One npx command, a full compliance suite, a letter grade. How @yawlabs/mcp-compliance catches protocol-level bugs your CI pipeline misses - with CI integration, badges, and Claude Code MCP-server mode.

Guide

OAuth Is Where Remote MCP Servers Break in Production

Token refresh mid-session, reconnect session persistence, multi-tenant isolation, API key rotation without downtime, per-tenant rate limiting - the five auth failure modes that split "works locally" from "works in production".

Guide

We Tested MCP Servers Against the 2025-11-25 Spec - Here Is What We Found

An 88-test compliance suite across 8 categories - including 23 on security alone. What most MCP servers get right, where they fall apart, and five suggestions for the spec.

Guide

10 CLI Tools That Replaced My GUI Apps in 2026

I uninstalled ten GUI apps this year. These are the terminal tools that made them unnecessary.

Guide

Tailscale on AWS: A Practical Guide to the Gotchas Nobody Warns You About

Real-world Tailscale gotchas on AWS: MagicDNS failures, subnet routing surprises, ACL lockouts, and the fixes that actually work.

Guide · updated July 21

Manage Your Tailscale Tailnet from Claude Code

What the MCP server actually exposes - 89 tools across the Tailscale v2 API surface, the safety hints, the profile presets, and how to install it in Claude Code, Cursor, or anything else that speaks MCP.

Opinion

Why CloudFormation Wins When Terraform's License Is a Liability

Terraform is under the BSL and owned by IBM. CloudFormation has zero licensing risk, managed state, and day-one AWS support. The trade-off has flipped.

Guide · updated July 21

We Built 13 MCP Servers - Here's What We Learned

What works, what's rough, and what we'd do differently after building MCP servers for Tailscale, AWS, Postgres, Redis, SSH, npm, and more.

Guide

We Audited Every Process and Temp File in Our Electron App

A user sent us 27 performance findings. Here's what was real, what wasn't, and what you can't fix.

Guide

The Hidden Cost of 200 MCP Tools in Context

Every MCP tool definition costs tokens, money, latency, and LLM attention. Here is the math on what 136 tools actually costs - and how to cut it by 60%.

Opinion

The LiteLLM Supply Chain Attack: What Every Developer Needs to Know

A poisoned GitHub Action compromised a popular AI package. 40,000 downloads in 40 minutes. Your CI/CD pipeline is an attack surface.

Opinion

Your CLAUDE.md Is Lying to Your Agent

AI agents trust your context files blindly. ctxlint catches stale paths, wrong commands, and wasted tokens.

Tutorial

Lambda Durable Functions: Do They Replace Step Functions?

AWS Lambda can now pause, checkpoint, and resume. Here's when Durable Functions replace Step Functions and when they don't.

Opinion

The Vibe Coding Backlash Is Real: What the Data Says

A METR study found developers are 19% slower with AI tools. AI code has 2.74x more vulnerabilities. 72% reject vibe coding. Here's why.

Comparison

Yaw vs Ghostty: Terminal Comparison

A fast native terminal vs a full developer workstation. Different philosophies, real trade-offs.

Opinion

IBM Bought HashiCorp and 38% of Terraform Users Want Out

The BSL license change was the crack. The IBM acquisition was the earthquake. Now the IaC landscape is fracturing.

Guide

SSH Just Works in Yaw

Yaw automatically starts ssh-agent and loads your keys. Git push, GitHub, and SSH connections work out of the box.

Opinion

When an ALB Can Replace Nginx (and When It Can't)

An AWS ALB handles routing, SSL, health checks, and redirects natively. Here's when you can drop Nginx and when you still need it.

Opinion

Why eksctl Is the Underrated, Killer Tool for EKS

eksctl handles EKS clusters, nodegroups, IRSA, and upgrades in one YAML file. Even alongside Terraform.

Tutorial

How to Connect Locally to RDS, Elasticache & DynamoDB with Tailscale

One small EC2 instance replaces all your SSH tunnels, bastion hosts, and VPN clients.

Tutorial · updated July 25

How to Use AI CLI Tools: Claude Code, Codex, and Gemini CLI

A practical guide to the major AI CLI tools, what they do, and how to set them up.

Guide

Best Terminal Emulators for Windows in 2026

A practical comparison of the top terminal emulators available on Windows today.

Opinion

Why Isolated Stacks Beat Nested Stacks in CloudFormation

Nested stacks promise reusability but deliver coupled blast radius. Isolated stacks with parameter sharing are simpler and safer.

Opinion · updated July 21

The Terminal I Wished Existed, So I Built It

A decade of terminal frustration, six tools that should have been one, and why AI changed the math on building it myself.

Opinion

Stop Juggling MCP Servers

One CLI that orchestrates every MCP server you run, locally from a JSON file you control.

Comparison

Yaw vs DBeaver: Do You Need a Separate Database Client?

DBeaver is the go-to database GUI. But what if your terminal already has a database client built in?

Comparison

Yaw vs MobaXterm: SSH Terminals for Windows Compared

MobaXterm has been a Windows SSH staple for years. We compare it to yaw's modern approach.

Comparison

Yaw vs Termius: SSH Management Compared

Both manage SSH connections, but one is a full terminal. Here's how they differ.

Comparison

Yaw vs Tabby: Cross-Platform Terminal Comparison

Both are Electron-based and cross-platform. We compare features, connections, and AI support.

Guide

The Complete Guide to MCP Server Configuration

How .mcp.json works, where every client stores config, project vs. global scopes, and the gotchas that trip people up.

Comparison

Yaw vs Warp: A Modern Terminal Comparison

Two modern terminals with AI built in. We compare privacy, features, platform support, and pricing.

Comparison

Yaw vs Windows Terminal: Which One Should You Use?

Windows Terminal is free and built in. Yaw adds SSH management, database connections, and AI. When does the upgrade make sense?

Tutorial

How to Manage SSH Connections Across Multiple Servers

Practical approaches to organizing SSH access when you're managing dozens of servers.

Comparison

Yaw vs iTerm2: Mac Terminal Comparison

iTerm2 is the macOS default for power users. Yaw brings connections, AI, and cross-platform parity. We compare the two.

Opinion

Why Your Terminal Shouldn't Phone Home

Your terminal sees everything. Here's why usage tracking in terminal apps deserves more scrutiny.

Tutorial

Best Terminal for Claude Code in 2026

Claude Code runs in your terminal. Which terminal gives you the best experience?

Guide

Best SSH Connection Managers in 2026

Tools for organizing and managing SSH connections across servers, from standalone apps to terminal-integrated solutions.

Guide

Best Terminals with Built-in AI in 2026

Terminal emulators that integrate AI assistants natively. What's available and how they compare.

Guide

Best Terminal Emulators for macOS in 2026

From the built-in Terminal.app to modern alternatives. Here are the best options for Mac.