Developer rewrites OneNote MCP server in TypeScript, exposes Microsoft Graph auth pitfalls

·1 views

A developer building a OneNote integration for AI assistants like Claude and Cursor encountered persistent 401 authentication errors when using an existing JavaScript MCP server. The root cause was the use of application-level permission scopes ending in '.All', which personal Microsoft accounts cannot validly consent to, causing Graph API to silently reject tokens. The fix involved switching to delegated, resource-qualified scopes that work for both personal and work or school accounts. The developer also found that personal Microsoft accounts issue non-JWT opaque tokens, meaning any code that validates token format by checking for JWT structure will incorrectly reject them. After resolving the auth issues, a full TypeScript rewrite was undertaken, replacing roughly ten overlapping scripts with a modular architecture using Zod-typed tools and removing unnecessary dependencies.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Build a Confidential OTC Settlement Protocol Using Oasis Sapphire and Base

A new developer tutorial on DEV Community walks through building a privacy-preserving over-the-counter trading protocol for large cryptocurrency transactions. The protocol combines confidential smart contract execution on Oasis Sapphire with transparent on-chain settlement on Base, an Ethereum Layer 2 network. It addresses a core challenge in decentralized finance: large trades executed through public liquidity pools expose sensitive order information to arbitrage bots and market participants, distorting prices. Oasis Sapphire enables confidential negotiation between counterparties directly within an EVM-compatible environment using standard Solidity code, keeping deal terms private until settlement. The tutorial covers key features including encrypted trade offers, private counterparty quotes, asset escrow, replay-attack prevention, and safe order cancellation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why temperature=0 Does Not Make AI Agents Deterministic and How to Test Them

A technical article on DEV Community explains why AI agents can produce different outputs even when temperature is set to zero, a setting commonly assumed to eliminate randomness. The variation stems from floating-point arithmetic on GPUs, request batching by model providers, and infrastructure changes such as hardware swaps or model re-quantization. Tests that rely on exact string matching therefore fail intermittently even when the agent is functioning correctly, eroding developer trust in test results. The article recommends shifting assertions away from literal text matching toward verifying output structure, required fields, data types, and valid values. Using JSON Schema validators like Ajv is proposed as a practical approach to writing resilient, semantics-focused tests for non-deterministic AI systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How Developers Can Build a Reusable Crypto Payment Kit for Agencies to Resell

A new blueprint outlines how developers can create a 'Merchant Crypto Launch Kit' — a packaged system that agencies can resell to their merchant clients instead of building one-off crypto payment integrations each time. The kit can include checkout flows, webhook handling, branded payment pages, onboarding documents, and support playbooks, giving agencies a standardized delivery system. Agencies are seen as the ideal channel because they already manage client websites, ecommerce stores, and SaaS products but often lack the expertise to handle crypto payment infrastructure themselves. The guide uses OxaPay as its reference infrastructure, citing its support for hosted invoices, white-label payments, static addresses, payout APIs, and automation integrations. The core argument is that selling a repeatable system to agencies is more scalable and commercially viable than selling individual integrations directly to merchants.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How a Misrouted S3 Worker Almost Handed a Startup a $30,000 AWS Bill

A startup came within 48 hours of receiving a $30,000 AWS invoice after a worker process fetched millions of small JSON files from S3 through a NAT gateway, which charges for every byte of data it routes. The NAT gateway, sitting between the company's private subnet and the internet, silently metered all traffic without any obvious warning to the engineering team. The fix required no application rewrite — adding a VPC gateway endpoint for S3 rerouted traffic through AWS's private network, eliminating the costly NAT charges entirely. The incident highlights a broader cloud cost trap: small-file workloads at scale generate disproportionate per-request overhead, and cross-AZ or NAT-routed traffic can quietly drain budgets. Engineers are advised to trace the physical path of data traffic before scaling any data-moving workload, since intra-region endpoint-routed traffic is often free while NAT-routed traffic is not.

0 comments Read more at DEV Community