Field notes on software, security & the web
Devlin Duldulao
Devlin Duldulao is the creator of DaloyJS, a software engineer, educator, and published author with 12+ years of experience building secure, production-grade web systems. Based in Norway, he writes books and courses for developers who care about shipping real software, and takes home cooking almost as seriously as TypeScript.
Start here
Featured writing
Securing the AI Agent Revolution: A Guide to Auth in a Multi-Party MCP World
The Model Context Protocol (MCP) promises a future of interconnected AI agents. But how do we secure it? This guide covers the security patterns, from API keys to JWTs, for authenticating and authorizing communication in a multi-party MCP ecosystem.
Deconstructing the Model Context Protocol - The Lingua Franca for AI Agents
A close look at the Model Context Protocol (MCP). Is it a true network protocol? How did it become a standard? This article walks through the anatomy of MCP, its core properties, and what it changes for developers building AI applications.
The Protocol for AI Agents - Building Scalable, Secure Full-Stack Applications with MCP
An introduction to the Model Context Protocol (MCP) and how to build secure, interoperable AI-powered applications with it. Covers the architecture, security practices, and a practical example using Next.js to create an AI project management assistant.
Fresh from the notebook
Recent posts
DaloyJS Should Be Your Default REST API Framework In 2027
Why DaloyJS is a strong default for modern TypeScript REST APIs, with contract-first routing, runtime portability, security guardrails, and zero runtime dependencies.
How HTML, CSS, and JavaScript Journey Through the Network and Get Rendered in the Browser
What actually happens between typing a URL and seeing a page. How HTML, CSS, and JavaScript travel over the network and get parsed, laid out, and painted by the browser.
When and Where to Use Generator Functions - Practical Use Cases
Three practical use cases for JavaScript generator functions - processing large data sets without holding them in memory, managing asynchronous flow, and building infinite sequences.
Qwik - The Next Evolution in Frontend Frameworks
An introduction to Qwik and its resumability model. What it is, how it cuts time to interactive, and why it matters for large web applications.