Vault Data Clean Room

Persistent JWT Signing Keys Using PostgreSQL

A technical how-to showing how to replace an in-memory JWKS key store with PostgreSQL-backed persistent stores for an OpenID Connect / OIDC authorization server. The article provides two Postgres-backed implementations: a JwksKeyStore that stores private keys using envelope encryption (per-key DEK encrypted with a master KEK via AES-256-GCM) and a JwksRotationTimestampStore that derives rotation time from the private key record's created_at timestamp. It includes database schema, Node/Bun code for DB access, crypto helpers, store implementations, integration points with @saurbit/oauth2-jwt (JoseJwksAuthority and JwksRotator), and instructions to run the example (GitHub repo: shygyver/auth-playground). Required env vars are DATABASE_URL and a base64-encoded 32-byte MASTER_KEY. Publication date: 2026-04-26.

Implementing A2A Agent-to-Agent Protocol

A developer post documents implementing Google's A2A (Agent-to-Agent) protocol across OpenClaw and Hermes agents on the Rapid Claw platform. The article explains A2A's standardized message envelope (fields like a2a_version, message_id, correlation_id, trace, sender, recipient, intent, payload, reply_to, expires_at), contrasts A2A with MCP (Model Context Protocol), and shows example FastAPI code for exposing an agent inbox, verifying signatures, and replying. It outlines three common communication patterns (request/reply, fan-out/fan-in, async with callback) and lists five essential platform-layer components for production deployments: registry/discovery, identity & mTLS, routing/network policy, observability (OpenTelemetry), and per-agent rate limits. The piece frames A2A as necessary, pragmatic infrastructure for reliable multi-agent systems in production.

Production-ready MCP Server Template with Postgres, OTEL, Kubernetes

The post describes fastmcp-production-template, an open-source template for building production-ready MCP (Model Context Protocol) servers using FastMCP. It addresses four production concerns: async PostgreSQL connection pooling (via asyncpg and a DatabasePool singleton initialized in FastMCP lifespan), security against prompt-injection (YAML allowlist plus a @require_allowlist decorator and column allowlists), observability (OpenTelemetry initialization with a tracer and four custom metrics plus OTLP export), and Kubernetes deployment (Helm chart with HPA, External Secrets Operator for Vault-backed secrets, non-root containers, and /health probes). The repo includes startup validators for DATABASE_URL and API key, quickstart Docker/Helm instructions, and is intended as an opinionated infrastructure template rather than application-specific code.