https://noamatout.com/en/ What I write about operations, security and agents: the trials, the mistakes and the limits. en Fri, 02 Oct 2026 00:00:00 GMT https://noamatout.com/en/articles/garmin-mcp-server/ https://noamatout.com/en/articles/garmin-mcp-server/ Fri, 02 Oct 2026 00:00:00 GMT I wrote an MCP server to query my Garmin training data. Real data broke three things my tests could not see. https://noamatout.com/en/articles/negative-control/ https://noamatout.com/en/articles/negative-control/ Thu, 01 Oct 2026 00:00:00 GMT I built a private site, then tried to prove it was leaking: two of my protections did not hold. https://noamatout.com/en/articles/auditing-my-own-mcp-server/ https://noamatout.com/en/articles/auditing-my-own-mcp-server/ Thu, 01 Oct 2026 00:00:00 GMT Everyone audits other people's servers. I measured mine, and a good score did not mean a closed door. https://noamatout.com/en/articles/personal-agent-two-profiles/ https://noamatout.com/en/articles/personal-agent-two-profiles/ Thu, 01 Oct 2026 00:00:00 GMT I split my personal agent into two profiles. I found six failures, five of them silent.