Retour au Catalogue
AI engineering

MCP Done Safely: Connect AI to Your Tools

MCP is the standard way to plug AI agents into your tools: tickets, docs, databases, your own product. Most tutorials stop at « it works ». This one starts there. You'll connect servers in Claude Code with the right scope and permission rules, learn what a malicious or compromised server can do, get OAuth right, and design tools that stay safe when the model is fooled. The last part is a real case study: the MCP server of a production SaaS, including the gaps found while writing this very course, and how they were fixed.

1 h 36
E-learning
Gratuit

Sessions organised on request

MCP Done Safely: Connect AI to Your Tools
Gratuit
Paiement sécurisé

Objectifs pédagogiques

  • Configure MCP servers and tool permissions in Claude Code at the right scope
  • Threat-model an MCP setup from the client and the server side
  • Review an MCP server's authorisation flow against the specification's best practices
  • Design a minimal, annotated tool set with server-side authorisation and audit

Public visé

Developers who connect AI agents to their tools or build MCP servers, platform and security engineers who approve them.

Prérequis

Basic web and OAuth vocabulary (token, scope, redirect) helps. Claude Code installed for the hands-on steps.

Programme de formation

  1. What MCP is, and why safety is the hard part · 2. Connecting servers in Claude Code · 3. Threats from the server side · 4. Authorisation done right · 5. Building a safe server · 6. Case study: a production MCP · 7. Final project

Moyens pédagogiques et techniques

Short explanations, diagrams and an animated walkthrough, hands-on configuration, a server design exercise and a real case study.

Modalités d'évaluation

  • Short checkpoint quiz on every page (one mistake allowed), final exam at 70 %
  • Three hands-on exercises with a rubric
  • Final project: an MCP security review, reference solution provided

Durée et rythme

Self-paced online, about 1 h 35.

Conditions d'accès

Free. Create a learner account on the course page and start immediately.

Délais d'accès

Immediate access after enrolment.

Accessibilité aux personnes en situation de handicap

Self-paced, no time limit. Diagrams have text descriptions, the animation has captions, all code is text.

Tarif

Gratuit

Funding

No funding needed.

Recognition

Non-certifying course: you receive a certificate of completion.

Dispensé par

ITwithDomITwithDom

Contact

Dominik Heinrich (ITwithDom)