Hi, I'm Pabasara.
Senior Software Engineer at WSO2, specialising in Identity and Access Management. I write about IAM, Agentic AI, frontend engineering, software architecture, and what breaks in production.
Currently
- Writing Mostly on Medium
- Building Open-source projects
- Reading About Agentic AI
Recent writing
Full archive →-
mcp-remote Crashed When the OAuth Port Was Taken, Here's How I Fixed It
An open source contribution to mcp-remote: recovering from EADDRINUSE on the OAuth callback port without silently breaking the registered redirect_uri.
-
Business Rules Don't Have to Live in a Wiki Page: Enforcing Them with a Roslyn Analyzer
A business rule that lived only in developers' memory, pushed down into the compiler with a .NET Roslyn analyzer that warns on every rule violation
-
How the Upcoming MCP Auth Spec Tightens Up (PKCE Won't Save You)
The 2026-07-28 MCP authorization release candidate brings six hardening and interoperability fixes: issuer validation, per-issuer credentials, refresh token guidance, and more. Explained in plain terms.
-
Sorting 70,000 Photos Without Losing the Weekend
How I used OpenAI's CLIP model to classify 70,000 photos into 13 categories locally in three hours — no cloud, no API, no labelled data.
-
Testing Your Local MCP Server with Claude Desktop and Claude Code
You've built an MCP server and it's running on localhost. Here's how you can actually test it.