Azure DevOps MCP server

Everything Fervor AI has published that touches Azure DevOps MCP server — 2 pieces, newest first.

• The Azure DevOps MCP Server Ships a Prompt-Injection Guardrail. One Tool Doesn't Use It.

  Microsoft built the prompt-injection defense for its Azure DevOps MCP server and applied it to wiki and build-log tools but not to the one returning pull request…

• Briefing · August 1, 2026 · afternoon

  Agent state that used to live somewhere invisible is being dragged into the open, by the MCP spec that deleted the hidden session, by YC scoping memory and permissions…