janbrennenstuhl.eu
Search, read and cite Jan Brennenstuhl's essays on AppSec, identity and agent identity.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
claude mcp add --transport http janbrennenstuhl-eu 'https://mcp.janbrennenstuhl.eu/mcp'
{
"mcpServers": {
"janbrennenstuhl-eu": {
"type": "http",
"url": "https://mcp.janbrennenstuhl.eu/mcp"
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Brennenstuhl on Security
The source of janbrennenstuhl.eu: Jan Brennenstuhl's essays, field guide and research notes on application security, identity, passwords, tokens and agentic engineering. Built with Hugo, hosted on Bunny in the EU, maintained on GitHub.
Build
The only build dependency is Hugo extended at the version in .hugo-version.
./scripts/bootstrap.sh # installs or checks Hugo
./scripts/verify.sh # builds public/ and runs every static release gate
python3 scripts/serve.py # http://127.0.0.1:8000, with real 404s and Markdown negotiation
Browser and lab checks (Node, test-only):
npm ci
npx playwright install chromium
npm run test:browser
npm run test:lighthouse
npm run test:edge
For agents
/llms.txtand/llms-full.txt- Markdown twin of every page at
<url>index.md, or withAccept: text/markdown /catalog.json,/findings.json,/feed.json/.well-known/api-catalog(RFC 9727)- A read-only MCP server (
edge/mcp/), deployable as a Bunny Edge Script - Policy:
/agents/. Search and retrieval are welcome; AI training is reserved.
Documentation
- Content contract: front matter, field-guide shape, shortcodes, machine outputs
- Design system: tokens, contrast, type, the diagram, budgets
- Delivery: CI, Bunny configuration, CSP, redirects, MCP, rollback
- Implementation notes: what changed and what is still open
Licenses
Original writing under content/ is CC BY 4.0 unless a page says otherwise. Credited third-party media keep their own rights. Geist and Geist Mono are under the SIL Open Font License 1.1 (static/fonts/OFL.txt). Hugo is Apache-2.0.
Frequently asked questions
What is janbrennenstuhl.eu?
Search, read and cite Jan Brennenstuhl's essays on AppSec, identity and agent identity.
How do I install janbrennenstuhl.eu?
It runs as a remote server. In Claude Code: claude mcp add --transport http janbrennenstuhl-eu 'https://mcp.janbrennenstuhl.eu/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.
Does janbrennenstuhl.eu need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is janbrennenstuhl.eu open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains janbrennenstuhl.eu?
It is published by jbspeakr. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.