Developer builds GitHub MCP server in Python using Nango to handle OAuth without token exposure

·1 views

A developer has published a tutorial demonstrating how to connect an AI agent to GitHub via a Python-based MCP server, where application code never directly handles OAuth tokens. The setup relies on Nango, an authentication middleware platform, to store, refresh, and inject GitHub credentials through a proxy layer. The MCP server exposes three tools — listing repositories, listing open issues, and creating issues — which any MCP-compatible client can invoke. Nango's proxy accepts requests with a secret key and connection ID, then forwards them to the GitHub API with the appropriate token attached. The project also highlights practical lessons around error handling with the MCP Python SDK, where only ToolError subclasses surface readable messages to the AI agent.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Build a Grafana Geomap Tracking Web Traffic and Threat Scores by Country

A developer tutorial on DEV Community outlines how to build a Grafana Geomap panel that visualises web traffic by country and colours it by threat score, with the full pipeline taking roughly an hour to set up. The guide warns that the widely used Worldmap plugin is now broken, as it relies on AngularJS support that was completely removed in Grafana 12, making the built-in Geomap panel the only viable option. Log enrichment — adding country codes and risk scores to each request — is identified as the core challenge, achievable either via local MaxMind MMDB files read by an Nginx module or by batch-querying an IP data API with caching. The article also flags that Promtail has been removed from Loki as of version 3.7.3 and must be replaced with Alloy, which offers a single-command migration tool. Several practical gotchas are highlighted, including that latitude and longitude values arrive as strings and that the X-Forwarded-For header can be spoofed by malicious clients.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

n8n to Present AI Agent Guardrails Session at NVIDIA GTC Berlin in October 2026

n8n Director of Engineering Claire Knight is confirmed to speak at NVIDIA GTC Berlin on October 20, 2026, in a session focused on governance and safety controls for autonomous AI agent workflows. The session, titled 'Bring Your Own Agent: Sovereign Guardrails for the Age of Autonomous Claws,' will cover sandboxing, guardrails, and production-grade oversight for AI agents connected to business systems. The talk addresses a growing challenge for organizations: how to benefit from AI automation without granting agents excessive access or authority over sensitive systems. NVIDIA has categorized the session under Agentic AI in its official GTC Berlin program, which runs October 20–22, 2026. The appearance represents n8n's public stance on controlled agent deployment and does not involve any product launch or feature announcement.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer turns five tricky JavaScript concepts into daily phone wallpapers

A developer struggling to retain core JavaScript concepts found that converting them into phone wallpapers helped reinforce daily revision. The five concepts covered include the event loop's microtask and macrotask queue order, closures, how 'this' is determined by the call site rather than where a function is written, JavaScript's inconsistent type coercion with operators like '+' and '-', and the temporal dead zone that affects 'let' and 'const' hoisting. Each wallpaper pairs a short code snippet with a plain-language explanation of the underlying rule. The approach was built around predicting code output before reading the answer, a method the developer also applies on their platform TechCookies.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How to Sign a PDF Digitally and Know Which Signature Type Is Valid

Signing a PDF electronically eliminates the need to print, sign, and scan documents, and can be done in minutes using browser-based tools. There are three main signature types: a simple image signature, an electronic signature service that records an audit trail, and a cryptographic digital signature that invalidates the document if altered. Electronic signatures are legally recognized for many agreements in countries like the United States under the ESIGN Act and across the EU under eIDAS, though rules vary by document type. Certain documents, such as property deeds, court filings, or government forms, may still require stricter methods, witnesses, or notarization. Experts advise using a signing service with an audit trail for high-stakes contracts, and recommend tools that process files locally to avoid uploading sensitive documents.

0 comments Read more at DEV Community