alphalist.CTO Podcast - For CTOs and Technical Leaders

#138 From Hacker News to W3C: How One Amazon Engineer Accidentally Shaped the Future of AI Browsers // Alex Nahas, MCP-B

41 min · 21. maj 2026
episode #138 From Hacker News to W3C: How One Amazon Engineer Accidentally Shaped the Future of AI Browsers // Alex Nahas, MCP-B cover

Description

How a browser-based fix for an enterprise auth problem became a W3C web standard and what it means for how AI agents will interact with the web. Alex Nahas, founder of MCP-B and initiator of the WebMCP web standard, joins Tobias to explore one of the most underappreciated shifts happening in AI: the browser as the primary runtime for agentic systems. Key topics covered: * What MCP actually is: an RPC framework for calling tools across processes, not the complex protocol it's made out to be * The OAuth problem: why MCP's push towards OAuth locked out most enterprise infrastructure still running on SAML * The WebMCP solution: running an MCP server in client-side JavaScript so agents can use the browser's existing auth context * How a Hacker News post posted under anesthesia got 400 upvotes and caught the attention of Google and Microsoft * Chrome 146 natively supports WebMCP, and what that means for adoption * The chicken-and-egg problem: why website owners won't add WebMCP support until clients support it, and vice versa * Agent identity: why agents don't need their own credentials and can operate as a subset of the user's identity * Real-time bidding for agents: the emerging market where advertisers bid to inject results into agent contexts - THE AGENTIC WEB IN TWO YEARS: HEADLESS BROWSERS, INTENT-BASED INTERFACES, AND AGENTS THAT ONLY SURFACE THE UI YOU NEED. [~04:30] "The browser itself is like the perfect sandbox we've been iterating on for so long now." — Alex Nahas [~06:30] "MCP is just an RPC framework. It's super simple. Basically just a wrapper around API documentation." — Alex Nahas [~13:00] "My first memory coming back was me arguing with people on Hacker News who didn't understand it." — Alex Nahas [~16:30] "Agents don't need their own identity. They can have an identity that's like a subset of the user who spun them off." — Alex Nahas [~32:30] "This reminds him of the dawn of programming — where everyone was just doing things and nobody really knew what they were doing, but people were just trying to figure things out." — Alex Nahas [~43:00] "Believe in yourself." — Alex Nahas

Comments

0

Be the first to comment

Sign up now and become a member of the alphalist.CTO Podcast - For CTOs and Technical Leaders community!

Get Started

1 month for 9 kr.

Then 99 kr. / month · Cancel anytime.

  • Podcasts kun på Podimo
  • 20 lydbogstimer pr. måned
  • Gratis podcasts

All episodes

142 episodes

episode #141 AI Pat Works Here Now: Why Agents Must Follow Human Rules with Pat Casey // CTO @ ServiceNow artwork

#141 AI Pat Works Here Now: Why Agents Must Follow Human Rules with Pat Casey // CTO @ ServiceNow

ServiceNow's CTO of 20 years explains why the safest way to deploy AI agents is to treat them like employees, same rules, same approvers, same spending limits, and why AI is reshuffling the deck on who your best engineers are. Intro How do you go from installing software off floppy disks to running engineering for a $13B revenue company — without ever losing the fish? Pat Casey, CTO of ServiceNow and its first engineer after founder Fred Luddy, joins Tobi to talk 20 years of scale, the architecture behind 90,000 databases, and why enterprise AI agents should be treated exactly like slightly untrustworthy employees. Key topics * Pat's nerd path: Atari 400, Wizardry, and building Adobe's first employee tracking system in Microsoft Access * Flipping off Fred Luddy in traffic — and becoming ServiceNow employee-after-one * The stuffed-fish code-ownership system and why productivity dips at ~100 engineers * Inside the architecture: Java metadata engine, hacked Rhino, K8s services, single-tenant clusters * RaptorDB: from MariaDB board seat to buying Swarm64 and forking Postgres * Gen 3 of AI coding: Windsurf vs Claude Code, the 15% average vs the 5x outliers * The five-chessboards theory of AI-native engineering, and Pat's daughter's vibe-coding conversion * "AI Pat": agents in the user table, following human rules * Hybrid pricing: seats for humans, consumption for AI * Is the market wrong about SaaS incumbents? Pat's answer to the Anthropic scare * What Pat would whisper to his younger self (spoiler: it's about Jelly XML — and family) Chapters [00:00:51] Intro: who is Pat Casey [00:01:43] Nerd origin story: Atari 400, tape storage, Wizardry [00:04:12] First job at Aldus/Adobe — accidental ITIL [00:06:12] Flipping off Fred Luddy → joining Glide in 2005 [00:08:28] From 2 job titles to 10,000 engineers — the introvert advantage [00:10:21] The stuffed fish, and the productivity trough at 100 engineers [00:13:44] Architecture: metadata engine, Java monolith, Kubernetes [00:16:41] The single-tenant bet: 90,000 databases, 25B queries/hour [00:21:32] MariaDB, Monty, and building RaptorDB from Swarm64 [00:27:21] Postgres fork, OpenJDK contributions, open-sourcing Raptor? [00:29:35] AI coding gen 1–3: Copilot → 7,000 Windsurf licenses → Claude Code [00:33:35] Five boards of chess: who clicks with AI coding (and who doesn't) [00:36:47] Pat's daughter and the vibe-coding conversion [00:38:21] Enterprise agents: from toolkits to outcomes [00:40:41] "AI Pat": agents that follow human rules [00:42:29] Pricing: seats for humans, consumption for AI [00:46:15] The Anthropic scare, SaaS valuations, and the incumbent advantage [00:53:06] The new bottleneck: not engineering, not product — customers [00:59:00] Pat's advice to CTOs: lean in, don't turf it [01:01:26] Time machine: what Pat would whisper to his 2005 self Quotes [00:41:30] "You should not trust an LLM more than you trust a human being. Modern business processes were designed on the assumption that human beings are a little bit untrustworthy." (fillers removed — verify against audio) [00:34:00] "AI coding, if you get to that next level, is like playing five boards of chess, 'cause you got multiple prompts spinning at the same time." (one "um" removed) [00:16:04] "If it was that easy, none of the world's big monolithic code bases would still exist." (condensed from "It's like, all right, if it was that easy, like, none of…" — verify) [01:01:26] "This is not a time for excessive caution. It's not a time to completely go bonkers and do crazy stuff, but this is a time really to lean into the new technology." (one "uh" removed)

2. juli 20261 h 6 min
episode #140 From Stripe's Fifth Engineer to Serving Millions of Developers with Anurag Goel // Founder & CEO @ Render Goel artwork

#140 From Stripe's Fifth Engineer to Serving Millions of Developers with Anurag Goel // Founder & CEO @ Render Goel

Anurag Goel was Stripe's fifth engineer before he built Render into a platform millions of developers deploy on. Here's his contrarian read on agents, security, and why "the AI cloud" is the wrong thing to be. Show Notes Anurag Goel joined Stripe as its fifth engineer in 2011 and later ran risk. He left to solve a big problem and landed on the one he'd watched eat Stripe's engineering time: making infrastructure disappear. This conversation is about what Render learned on the way to millions of developers and what changes now that a lot of what gets deployed isn't a website, it's an agent. * Key topics:* From Stripe's fifth engineer to founding Render The "application cloud" vs. "AI cloud" positioning Agents as long-running, stateful applications for a new end user Workflows, sandboxes, and the consolidated AI runtime Executive hiring and reference calls as a growth hack Security: minimizing blast radius, short-lived scoped keys Distribution in the chatbot era (GEO) and why Google is underrated Observability is the real bottleneck for production agents Timestamps [00:00:00] Intro and the pitch [00:02:00] Origin story: ebook search engine, game rentals, and the first-ever Stripe payment [00:04:00] Joining Stripe as engineer #5; talent density [00:06:00] Raising the hiring bar, no warm bodies [00:11:00] Executive hiring and reference calls as a growth hack [00:13:00] Why he started Render: ~20% of Stripe's engineers stuck on AWS [00:16:00] Agents as a new kind of application [00:17:00] "We're the application cloud, not the AI cloud" [00:18:00] Workflows, sandboxes, and the consolidated AI runtime [00:24:00] Heroku's decline and the exploding sales pipeline [00:25:00] The agentic moment: when adoption spiked [00:33:00] Security and blast radius [00:50:00] Why SaaS isn't dying specialization [00:58:00] Distribution: from SEO to GEO [01:02:00] Why Google is underrated [01:03:00] Advice for CTOs going all in on agents [01:06:00] Easter egg: a whisper to his 2011 self

18. juni 20261 h 12 min
episode #139 Your Future Job Is a Decision Inbox — Max Deichmann Built the Layer That Gets You There // Co-Founder @ Langfuse artwork

#139 Your Future Job Is a Decision Inbox — Max Deichmann Built the Layer That Gets You There // Co-Founder @ Langfuse

Max Deichmann built Langfuse — the open-source LLM engineering platform acquired by ClickHouse — and explains why the engineer of the future isn't writing code, they're reviewing what agents did overnight. Max Deichmann didn't set out to build the observability layer for the AI era. He started with mobile apps, taught himself to code via Harvard's CS50, and ended up in Y Combinator with a SaaS product he wasn't excited about. Then ChatGPT launched, and on a Sunday night at 10 pm, his co-founder asked: "If you just had time, what would you build?" The answer became Langfuse and eventually led to an acquisition by ClickHouse. This episode is a rare, grounded conversation about what building and operating AI agents actually looks like in 2025, from the engineering loop to the 3 am incident, to what the engineer's job becomes when agents are doing most of the execution. Key topics: * Why LLM applications broke traditional observability tools, and what Langfuse does instead * The pre-production → production → evaluation → iteration loop for agent development * Open source as a trust and adoption strategy for dev tools * The ClickHouse acquisition: why they sold, what the half-page doc said, and how it's going * Agentic incident response: copy-pasting alerts into Codex at 3 am, and what comes next * The "decision inbox" engineers are reviewers and decision-makers, not coders * The real state of agents in production: what's working, what's not, and what LinkedIn gets wrong Timestamps: [00:00:00] Intro & guest welcome [00:02:00] Max's nerd origin story CS50 on a beach in Singapore [00:04:00] Why they pivoted to Langfuse: firing customers mid-YC batch [00:06:00] Building the first AI products and discovering the observability gap [00:07:00] What Langfuse actually does: the LLM engineering platform explained [00:09:00] Tracking business AND infrastructure metrics billing via Langfuse [00:10:00] Open source from day one: trust, adoption, and hardening the product [00:13:00] Go-to-market with 1.5 salespeople: how engineers sell to enterprises [00:14:00] The acquisition story: 5 engineers, 40TB/day, and a Series A that became a sale [00:17:00] What it felt like when half the AI ecosystem knocked on their door [00:18:00] Life inside ClickHouse: cultural fit, Tokyo offsite, and what surprised them [00:20:00] Agentic coding in practice: velocity per engineer, what still needs a human [00:22:00] The planning loop: Claude summarising GitHub discussions, RFC → agent → review [00:23:00] The "decision inbox" model: engineers as taste-makers and reviewers [00:27:00] How to build an observability stack for the agentic era from scratch [00:29:00] Agentic on-call: the 3 am Codex workflow and what's coming next [00:32:00] Where Langfuse fits vs. traditional observability agent quality vs. infra health [00:35:00] The real state of agents in production: the non-LinkedIn version Best quotes: "We didn't initially jump on the topic because we thought all the PhD AI people, they are much better at this. We have no idea what's going on, until we figured out nobody has a clue what's going on." — [00:05:00–00:06:00] "We have two guys doing customer support, and we have basically an agent that is doing first-level customer support for us, and I think it's about doing about 10,000 conversations a week. We would never be able to do this type of support with two people." — [00:38:00] "The alert comes in, I wake up at the night, I just take the alert from our Slack, copy paste it into Codex, and we have a skill there with all the context, and then it's just going." — [00:29:00–00:30:00] "I currently think of an email/Linear inbox where an agent tells me, 'Hey Max, we needed to fix this here because this broke.' And then if I want to, I can just dive into it and see all the context within this notification and also take a corrective course, or I just let it go." — [00:41:00]

4. juni 20261 h 3 min
episode #138 From Hacker News to W3C: How One Amazon Engineer Accidentally Shaped the Future of AI Browsers // Alex Nahas, MCP-B artwork

#138 From Hacker News to W3C: How One Amazon Engineer Accidentally Shaped the Future of AI Browsers // Alex Nahas, MCP-B

How a browser-based fix for an enterprise auth problem became a W3C web standard and what it means for how AI agents will interact with the web. Alex Nahas, founder of MCP-B and initiator of the WebMCP web standard, joins Tobias to explore one of the most underappreciated shifts happening in AI: the browser as the primary runtime for agentic systems. Key topics covered: * What MCP actually is: an RPC framework for calling tools across processes, not the complex protocol it's made out to be * The OAuth problem: why MCP's push towards OAuth locked out most enterprise infrastructure still running on SAML * The WebMCP solution: running an MCP server in client-side JavaScript so agents can use the browser's existing auth context * How a Hacker News post posted under anesthesia got 400 upvotes and caught the attention of Google and Microsoft * Chrome 146 natively supports WebMCP, and what that means for adoption * The chicken-and-egg problem: why website owners won't add WebMCP support until clients support it, and vice versa * Agent identity: why agents don't need their own credentials and can operate as a subset of the user's identity * Real-time bidding for agents: the emerging market where advertisers bid to inject results into agent contexts - THE AGENTIC WEB IN TWO YEARS: HEADLESS BROWSERS, INTENT-BASED INTERFACES, AND AGENTS THAT ONLY SURFACE THE UI YOU NEED. [~04:30] "The browser itself is like the perfect sandbox we've been iterating on for so long now." — Alex Nahas [~06:30] "MCP is just an RPC framework. It's super simple. Basically just a wrapper around API documentation." — Alex Nahas [~13:00] "My first memory coming back was me arguing with people on Hacker News who didn't understand it." — Alex Nahas [~16:30] "Agents don't need their own identity. They can have an identity that's like a subset of the user who spun them off." — Alex Nahas [~32:30] "This reminds him of the dawn of programming — where everyone was just doing things and nobody really knew what they were doing, but people were just trying to figure things out." — Alex Nahas [~43:00] "Believe in yourself." — Alex Nahas

21. maj 202641 min
episode #137 - Only Three Search Engines Left Standing: One of Them Powers Your AI with JP Schmetz // Chief of Ads @ Brave artwork

#137 - Only Three Search Engines Left Standing: One of Them Powers Your AI with JP Schmetz // Chief of Ads @ Brave

Thirty years building search infrastructure — and why the AI industry quietly depends on it. SHOW NOTES Jean-Paul Schmetz has been close to search infrastructure for nearly three decades — as founder of Clix, the European search engine that eventually became part of Brave, and now as Chief of Ads at Brave Software. In this conversation with Tobi, he opens up the hood on one of the internet's most misunderstood infrastructure layers. Key topics covered: * The three independent search indices: why only Google, Bing, and Brave could answer every query on earth if the others disappeared * How AI grounding works — and how most AI products are either paying for Brave Search API or quietly scraping Google * The SERP API ecosystem: legal exposure, unit economics, and why Jean-Paul gives it a two-year shelf life * Google's origin story: the NDA, the 120% revenue share strategy, and why they spent years pretending to lose money * What it takes to build a search index from scratch — and why it's still a 10-year problem * The Inktomi story: the $1M autocomplete investment no one else was willing to make * Why Brave is profitable selling shovels to the AI gold rush — and what that looks like at $10M/month in infrastructure * Agents and the web: why most people won't know what to do with 50 agents, just like they didn't know what to do with 50 employees * What Jean-Paul would tell his 1996 self: think simpler, invest more aggressively, and stop underestimating capital TIMESTAMPS: [to be added] QUOTES: [17:49] "Google was not better. It was just simply that they were driving you to queries they could answer better." — Jean-Paul Schmetz [37:44] "There are more countries in the world that build atom bombs than countries that have a search engine." — Jean-Paul Schmetz [49:08] "You're driving these Formula 1s with the wheels not properly attached." — Jean-Paul Schmetz [01:28:45] "It's easy to appear intelligent when you list all the things that can go right, but it's much more courageous to actually claim what can go wrong." — Jean-Paul Schmetz

7. maj 20261 h 33 min