Now

A now page - a snapshot of what I'm focused on at this point in time. Updated manually when things shift. Last updated: October 2026.

Day job

Senior Software Engineer at WSO2, focused on Identity and Access Management and enterprise integration. Most of what I know about OIDC, Oauth2, federation, and IAM comes from this work.

Writing

Working on a few articles on IAM, software architecture and Agentic AI topics.

My co-authored research paper was published at the APIIT International Research Conference 2026 (AIRC 2026) on 1 October and won the Best Paper Award. It maps the NHS DSP Toolkit to four AWS controls that govern who can act on patient data, not only where it is stored.

Just published a piece on why a busy port made mcp-remote crash on startup, and why the obvious fix quietly breaks OAuth.

Building

Contributing to mcp-remote, the proxy that lets stdio-only MCP clients reach remote servers. My fix for the OAuth callback port crash (#262) shipped in 0.1.39.

Building an open-source Angular PDF annotation editor as a pet project. Current focus: annotation persistence reliability and page manipulation.

Reading

Reading the latest MCP authorization spec and how different identity providers support it.

Comparing what each provider actually implements against what the spec expects of an MCP authorization server, and where the gaps are.

Alongside that, how enterprises govern AI agents once they move past pilots: who an agent is, what it is allowed to do, and who can stop it. It ties straight into WSO2 Agent Manager, open control plane for agents.