This talk explores the architecture and implementation of OAuth-based authentication for remote-hosted MCP servers. I'll walk through the specific challenges I encountered while building an MCP server at Tigris — including managing dynamic client registrations, token lifecycle management and scope handling across distributed environments.

I'll also cover UX choices like reducing friction in the auth flow, handling token refresh gracefully, and managing session state.

Our coding agents are getting smarter, but the workspace we drop them into is probably not enabling them to use their full potential. The decisions, failed attempts, conventions, and product knowledge are still crucial context scattered across people’s heads, Confluence, old conversations, and forgotten pull‑request comments.

During this talk, we'll walk through the shift from the “good old” prompt engineering to agent experience, then I'll show a practical AX experiment at my current company that led to a better workspace for both agents and the people using them.

TC39 is working on two proposals, import defer and export defer, whose goal is to allow developers to extract better performance from native ESM, both in the browser and on the server. Let's go together through how they work, and when and where you'll be able to use them!