MCP Dev Summit Seoul 2026: Full Schedule

10:55 KST

Stateful AI Agents: Building Consistent Systems with MCP and Distributed SQL - Nasiullha Chaudhari, YugabyteDB

Thursday August 13, 2026 10:55 - 11:20 KST

An agent processes a payment, hits a timeout, and retries. Now the payment has been charged twice. The model didn’t hallucinate. The workflow did exactly what it was told. The problem is that nobody designed the agent to be safe under retry.

This is a distributed systems problem.

When agents read data, take actions, and write results back, correctness depends on how state is managed across steps. Under retries or concurrent execution, the same workflow can produce conflicting outcomes.

This talk shows how to build stateful AI agents using the Model Context Protocol with a PostgreSQL-compatible distributed database. Instead of treating memory as embeddings, we treat it as structured, transactional state.

You will learn how to design MCP tools for database operations, manage multi-step workflows, and handle failure modes such as retries and idempotency. We will also explore consistency tradeoffs in distributed systems.

The session ends with concrete patterns for building reliable agents, including idempotent tools and safe retry design.

Speakers

Nasiullha Chaudhari

Developer Engagement Manager, YugabyteDB

Nasiullha Chaudhari works as a Developer Engagement Manager at YugabyteDB, focusing on AI systems, distributed databases, and cloud-native architectures. He works on real-world AI agent systems and focuses on what it takes to run them reliably in production.

He is a Docker Captain and an international speaker who has spoken at developer and infrastructure conferences globally. He shares practical insights through his YouTube channel with 180K+ subscribers and with 70K+ followers on LinkedIn

... Read More →

Thursday August 13, 2026 10:55 - 11:20 KST
Orchid 2

Building with MCP

11:25 KST

From Legacy To Agentic AI - Seoyul Yoon, AAIF Community Seoul

Thursday August 13, 2026 11:25 - 11:50 KST

Orchid 2

What does it take to bring a company's legacy systems into the AI era?

Hand-coding tool functions for every backend is not sustainable; maintenance costs grow exponentially as the number of services increases. We solved this with a combination of open source projects.

Given a single OpenAPI spec, the system automatically converts endpoints into MCP Tools, a Kubernetes Operator provisions and manages the MCP server, and a LangGraph + deepagents-based Agent talks to internal systems on top, with Agent Skills (SKILL) shaping how that agent behaves.

This session shares how we selected and composed five open source projects, along with the real-world challenges we hit along the way: multi-provider OAuth, custom Keycloak token verification, per-backend header injection, transport-naming inconsistencies across MCP clients, and rewriting auto-generated tool descriptions to fit the LLM.

Not a finished solution, but a practitioner's account showing that turning legacy systems into AI-ready interfaces is entirely achievable with open source.

Speakers

Seoyul Yoon

Organizer | Platform Engineer, AAIF Community Seoul

I am an AAIF Community Seoul organizer and platform engineer focusing on bridging the gap between legacy enterprise systems and the Agentic AI era. As a passionate advocate for the open-source ecosystem and an active member of Cloud Native Community Korea, I explore the intersection... Read More →

From Legacy to Agentic AI pptx

Thursday August 13, 2026 11:25 - 11:50 KST
Orchid 2

Building with MCP

11:55 KST

Secure MCP Servers in Production: A Practical Guide for Developers - Valeri Milke, VamiSec GmbH

Thursday August 13, 2026 11:55 - 12:20 KST

Orchid 2

Model Context Protocol (MCP) is quickly becoming a core interface layer for AI agents, yet many teams still secure MCP servers as if they were ordinary APIs. This session provides a practical guide for building and operating secure MCP servers in production.

I will translate key security principles into concrete engineering decisions: secure local vs. remote MCP architectures, trusted tool onboarding, signed manifests, schema-based input and output validation, prompt injection controls, OAuth 2.1 / OIDC-based authentication, centralized policy enforcement, hardened deployment, audit logging, and continuous validation.

The goal is not theory, but an actionable security baseline that developers, architects, and platform teams can apply immediately. Attendees will leave with a pragmatic minimum bar and review checklist for MCP server development that helps reduce avoidable security failures, improve trust between clients and servers, and strengthen the security posture of the growing MCP ecosystem.

Speakers

Valeri Milke

CEO, VamiSec GmbH

Valeri Milke is CEO of VamiSec GmbH and an AI security and compliance expert focused on secure development, threat modeling, and the practical implementation of trustworthy AI systems. His work spans LLM security, agentic AI, software and product security, and regulatory frameworks... Read More →

Thursday August 13, 2026 11:55 - 12:20 KST
Orchid 2

Security + Identity + Trust

13:50 KST

Who Watches the Watchmen? Safe AI-Agent Failover Via MCP and CRDs - Phuong Bac Ta, Research Center for Distributed Cloud and Networking, SSU, South Korea & Vitumbiko Mafeni, CNLAB | SSU IISTRC

Thursday August 13, 2026 13:50 - 14:15 KST

Orchid 2

Giving an AI agent access to a Kubernetes cluster sounds powerful — until it runs the wrong command. The real challenge is not connecting an LLM to a cluster, but constraining what it can do, enforcing correctness, and keeping a human meaningfully in the loop.
This session presents a blueprint for safe, auditable MCP-powered operations through a real use case: an AI-assisted failover system for Kubernetes. Instead of letting an agent call cluster APIs directly, we place a Failover MCP Server in front of the cluster and expose only discrete, permission-scoped tools for observation and controlled action.
Beneath that reasoning layer, a Kubernetes Operator serves as the enforcement point. CRDs such as FailoverPolicy and DisasterRecoveryPlan encode failover semantics, validate requested actions, and ensure execution remains deterministic and policy-compliant. Sensitive actions are held behind a requireApproval setting in the Agent manifest until an operator explicitly approves the next step.
The talk closes with lessons on where LLM reasoning helps during incidents and why Operator-controlled execution still matters in high-risk workflows.

Speakers

Vitumbiko Mafeni

Research Engineer, Research Center for Distributed Cloud and Networking

I am a Research Engineer at the Research Center for Distributed Cloud and Networking, SSU, South Korea, specializing in cloud-native technologies for AI, edge computing, and 5G. I actively contribute to and engage with open-source projects, collaborating with the community to explore... Read More →

Phuong Bac Ta

Research Engineer, Distributed Cloud and Networking Research Center, SSU-IISTRC

Phuong Bac Ta is a Research Engineer at the Research Center for Distributed Cloud and Networking, SSU, South Korea. He works on cloud-native platforms, distributed systems, and Agentic AI for operations, with a focus on observability, automated failover, and resilient infrastructure... Read More →

Thursday August 13, 2026 13:50 - 14:15 KST
Orchid 2

Building with MCP

14:20 KST

Authorization in MCP Systems: Getting It Right From the Start - Aram Andreasyan, Cerbos

Thursday August 13, 2026 14:20 - 14:45 KST

Orchid 2

When teams start building on MCP, one of the first real questions that comes up is simple: what are agents actually allowed to do?

In smaller setups, it's easy to bake access checks into the agent or the application itself. That works until it doesn't. Once you're dealing with multiple tools, services, and data sources, things get messy fast. Permission logic gets copied across services, drifts out of sync, and when something breaks, nobody can agree on where the problem actually lives.

This talk covers how I approach authorization in MCP-based systems. Where access decisions should live, how to keep them consistent as complexity grows, and what changes when agents are acting on behalf of users rather than just on their own.

The focus is on patterns that have worked in real systems: centralizing your policy layer, passing the right context through each request, and keeping decisions auditable so you can trace what happened and why.

You'll leave with a clearer way to think about authorization in MCP environments, and a better sense of where things tend to break down as systems scale.

Speakers

Aram Andreasyan

Director of Solutions, Cerbos

Aram works at Cerbos helping engineering and security teams tackle authorization complexity through policy-as-code. He has a background in cybersecurity, cloud security, and IAM, and spent years consulting for startups and enterprises across EMEA and North America before joining Cerbos... Read More →

Thursday August 13, 2026 14:20 - 14:45 KST
Orchid 2

Security + Identity + Trust

14:50 KST

Who Authorized That Agent? Identity and Policy Enforcement for MCP Tool Calls - Jorge Ruiz Arto, Gravitee

Thursday August 13, 2026 14:50 - 15:15 KST

Orchid 2

When a human calls an API, identity is well understood, OAuth tokens, JWTs, API keys. When an AI agent calls that same API via MCP, the identity model breaks down. Who is the caller? What should it be allowed to do? How do you revoke access when something goes wrong? As MCP adoption moves from dev laptops into production systems, the absence of a consistent identity and authorization layer for agent-initiated traffic is becoming a critical gap. This session walks through the auth problem from first principles covering OAuth flows for non-human callers, per-agent rate limiting, JWT validation at the MCP proxy layer, and policy enforcement patterns that don't require rewriting your backend services. Attendees will leave with a concrete mental model and implementation patterns for securing MCP tool calls in production.

Speakers

Jorge Ruiz Arto

Senior Director, Product Marketing, Gravitee

Jorge Ruiz is Sr. Director of Product Marketing at Gravitee, focused AI gateways and the infrastructure needed to govern AI agents at scale. A former software engineer, he helps turn complex technical concepts into clear product strategy.

Thursday August 13, 2026 14:50 - 15:15 KST
Orchid 2

Security + Identity + Trust

15:45 KST

Why Enterprise MCP Runs on Java - Kevin Dubois, IBM & Daniel Oh, Red Hat

Thursday August 13, 2026 15:45 - 16:10 KST

Orchid 2

Most MCP examples are written in Python or TypeScript. Great for prototypes, but enterprises don't ship prototypes. They ship type-safe, robust, observable, secure services. Exactly what Java excels at.

And, perhaps contrary to popular belief, building MCP servers or clients with Java is not hard at all. It is as natural as creating REST servers and clients. Swap a few dependencies, annotate your methods, and your services speak MCP.

But MCP in Java isn't just about exposing data to LLMs. It can also vastly augment your AI development experience. We'll show how we built an MCP-based agent into the Quarkus framework that exposes live runtime intelligence to your code assistant: structured exceptions, dynamically discovered tools, extension-specific coding patterns, and version-aware documentation search. With this, your agent doesn't just write code; it can also get real-time feedback from the running application, recover from crashes, and learn patterns specific to the frameworks in your project.

Through real-world examples including IoT integrations and Kubernetes analysis agents, we'll show why Java is the natural home for enterprise MCP adoption.

Speakers

Daniel Oh

Senior Principal Developer Advocate, Red Hat

Java Champion, CNCF Ambassador & TAG DevEX Co-Chair, AAIF Ambassador, Microsoft MVP, Developer Advocate, Technical Marketing, Keynote Speaker, Published Author

Kevin Dubois

Sr Principal Developer Advocate, IBM

Kevin Dubois is often featured as a (keynote) speaker at conferences around the world, where he shares his passion and knowledge about developer experience, Agentic AI, open source, cloud native development and Java. He is also an author, java Champion, and an accomplished software... Read More →

Thursday August 13, 2026 15:45 - 16:10 KST
Orchid 2

Enterprise Adoption + Integration

16:15 KST

From APIs To Agentic Toolkits: Designing MCP Flavors and a Public MCP Gateway at Scale - Faizan Akhtar, React India

Thursday August 13, 2026 16:15 - 16:40 KST

Orchid 2

As teams adopt MCP, a common anti-pattern appears: expose an entire API surface as tools and hope the agent figures it out. In practice this leads to confusion, brittle behavior, and security headaches.

In this talk, I’ll walk through a practical architecture for taming that complexity using MCP flavors and a Public MCP gateway. We’ll start from the real constraints: large APIs, multiple products, and agents that need a bit of more focus & from there:

- design flavors as curated tool bundles on top of existing OpenAPI contracts;
- expose them via a gateway (/mcp vs /{flavorId}/mcp) while handling auth and routing cleanly;
- and plug these flavors into agents in editors or chat environments.

I’ll also cover how to evaluate and debug flavors using datasets and traces so they’re treated like product surfaces with their own quality bar, not opaque black boxes. Finally, I’ll share lessons learned ramping from a mostly frontend/“traditional” engineering background into MCP and agentic infrastructure work: what worked, what didn’t, and what I’d do differently.

Speakers

Faizan Akhtar

Organiser, React India

Avid Learner | Always a student | Community Enthusiast | Mixed Reality Evangelist A software engineer trying to grasp technical and interpersonal skills as much as possible. I've organized and spoken at numerous tech conferences and meetups, giving me a strong background in both technical... Read More →

Thursday August 13, 2026 16:15 - 16:40 KST
Orchid 2

Ecosystems + Registries + Platform Infrastructure

16:45 KST

From CRDs to Conversations: Simplifying Chaos Engineering With MCP - Pritesh Kiri, Harness

Thursday August 13, 2026 16:45 - 17:10 KST

Orchid 2

Imagine telling your system, “Simulate a pod failure on the payments service,” or asking, “What chaos experiments have we run on service X in the last 30 days?” This talk covers a practical approach to using the Model Context Protocol (MCP) with LitmusChaos. The goal is to move away from manual YAML configuration and CRD lookups by using a natural language interface. I'll demonstrate how this MCP setup works and how it changes the workflow for designing and running resilience tests.

This session introduces Chaos Engineering and explores how MCP makes it more accessible. By replacing YAML and dashboards with human language, we’re lowering the barrier to entry for chaos engineering. Resilience testing becomes accessible to QA, product, and on-call teams, not just platform experts. Whether or not you’re currently using Litmus, this talk will provide a roadmap for building your own chaos copilot and a glimpse into a future where resilience is everyone’s responsibility.

Speakers

Pritesh Kiri

Pritesh Kiri, Harness

Pritesh is the DevRel Engineer at Harness and community manager and maintainer of the LitmusChaos Community. He is also the Head of Community at ReactPlay, leading the ReactPlay Bangalore chapter. He has a strong background as a Developer Advocate, leading tech communities and fostering... Read More →

Thursday August 13, 2026 16:45 - 17:10 KST
Orchid 2

Building with MCP

10:40 KST

When MCP Tools Fail: Reliable ML Inference for MCP Agents - Sho Tanaka, Snowflake

Friday August 14, 2026 10:40 - 11:05 KST

Orchid 2

The Model Context Protocol (MCP) is emerging as a standard for connecting AI agents with external tools. While LLM-based tools are flexible, their non-deterministic behavior makes it difficult to meet requirements for stability, repeatability, and auditability in production systems. In such cases, traditional machine learning models provide more predictable inference and are often preferred for system-critical decisions.

However, ML-powered tools are not free from challenges. Latency, failures, and integration issues can propagate through MCP systems and impact agent behavior, leading to inconsistent decisions, repeated retries, or silent failures.

This session explores what happens when MCP tools fail and how to design systems that remain reliable under such conditions. We present a reproducible demo of failure scenarios, including latency spikes and unstable predictions, and show their impact on agent behavior. We then introduce practical design patterns—such as timeout and retry strategies and observability—to build reliable MCP-based systems.

Attendees will gain concrete techniques to design trustworthy AI systems that remain stable in real-world environments.

Speakers

Sho Tanaka

Lead Developer Advocate, Snowflake

Sho Tanaka is a Lead Developer Advocate at Snowflake, focused on AI/ML and data engineering. He previously worked at Google (gTech) delivering ML/Data solutions across Japan, APAC and global. He is a Google Developer Expert (AI/ML) and a co-founder of the MLOps community in Japan... Read More →

Friday August 14, 2026 10:40 - 11:05 KST
Orchid 2

Security + Identity + Trust

11:10 KST

Beyond APIs: Making MCP Services Faster and Secure With WebAssembly - Brandon Kang, Akamai Technologies

Friday August 14, 2026 11:10 - 11:35 KST

Orchid 2

As MCP adoption grows, most implementations focus on defining tools and integrating APIs, but far less attention is given to how these tools are actually executed. In production environments often introduces real challenges in both security and performance.

In this session, we explore how WebAssembly fundamentally changes this model by providing a secure and high-performance execution layer. We'll also work through how MCP tools can run inside a sandboxed WebAssembly runtime, where access to the file system, network, and environment is explicitly controlled. This significantly reduces the attack surface compared to traditional server-side execution models, especially in multi-tenant and agent-driven environments.

From a performance perspective, WebAssembly enables near-native execution speed with extremely fast startup times. WebAssembly modules can start in milliseconds, making them ideal for MCP workloads where tools are invoked frequently and latency directly impacts agent responsiveness.
We will also cover authentication patterns such as OAuth and JWT, and explain how a “secret-less” architecture can be achieved by isolating credentials outside of the execution runtime.

Speakers

Brandon Kang

Principal Technical Solutions Architect, Akamai Technologies

Brandon Kang is a Principal Technical Solutions Architect at Akamai Technologies, overseeing cloud computing products and cloud-native initiatives across Asian countries.

Before joining Akamai, he held key roles in leading technology companies, including serving as a software e... Read More →

MCP DevSummit Seoul Brandon pdf

Friday August 14, 2026 11:10 - 11:35 KST
Orchid 2

Security + Identity + Trust

11:40 KST

From Chaebol to Cloud-Native: MCP Agent Platforms Inside Korea's Manufacturing Giants - Yogesh Sardana, Independent

Friday August 14, 2026 11:40 - 12:05 KST

Orchid 2

Korea's industrial conglomerates—chaebols like Samsung, SK Hynix, Hyundai, LG, and POSCO—operate the most sophisticated manufacturing ecosystems on the planet. Behind the scenes, each utilizes thousands of highly proprietary, heavily siloed Operational Technology (OT) and Information Technology (IT) systems resulting from decades of organic growth and acquisitions. Currently, engineers waste weeks manually extracting, normalizing, and correlating data from these isolated environments before any advanced AI analysis can even begin. This session explores the transformative role of the Model Context Protocol acting as a universal, cloud-native translation layer. We will reveal how manufacturing giants are utilizing Kubernetes-hosted MCP platforms to seamlessly bridge legacy industrial control systems with modern AI agents, radically accelerating industrial intelligence.

Speakers

Yogesh Sardana

AI, Cloud Engineering Leader & Researcher, Independent

Friday August 14, 2026 11:40 - 12:05 KST
Orchid 2

Building with MCP

13:35 KST

Your MCP Server Behaves Differently in Every Client: A Cross-Client Field Guide for Server Authors - Tanisha Sharma, Bolna & Animesh Pathak, Harness

Friday August 14, 2026 13:35 - 14:00 KST

Orchid 2

Same MCP server. Same prompt. Three different IDEs. Three different outcomes — and one of them is silently wrong.

After documenting a production MCP server across Cursor, Claude Desktop, and Windsurf, the speaker has the war stories. Tool descriptions one client truncates and another expands. Resource limits that vary by 10x. Notification semantics that work in one host and silently no-op in another. OAuth flows that route through different dances depending on the client. Session-lifetime assumptions that turn into "why did my context vanish?" support tickets.

This talk is a field guide, organized by client, with the actual diffs server authors should care about. Live side-by-side traces of the same tool call across three clients, showing where each one quietly diverges from the spec — and the small defensive changes (in tool naming, description length, error semantics) that make a single server work the same way in all three.

Closes with a proposal: a "client compatibility matrix" the MCP ecosystem should publish and maintain, modeled on Can I Use for the web.

For MCP server authors who have only ever tested in one client.

Speakers

Animesh Pathak

DevRel Engineer, Harness

I'm Animesh Pathak - a Developer Relations Engineer currently at Harness, focused on Database DevOps, APIs, testing, and open-source innovation. Previously, I worked at Keploy where I evangelized eBPF-based testing tools.

Tanisha Sharma

AI DevRel Engineer, Bolna

Tanisha is an AI Developer Advocate specializing in production multi-agent systems. Also a private pilot. Both pursuits taught her the same lesson: know when to trust automation and when human judgment matters most.

Friday August 14, 2026 13:35 - 14:00 KST
Orchid 2

Building with MCP

14:05 KST

When AI Agents Need Eyes: What MCP Can and Cannot Standardize for Computer Vision - Seowoo Han, B GARAGE

Friday August 14, 2026 14:05 - 14:30 KST

Orchid 2

AI agents are increasingly expected to work with visual information: documents, screenshots, cameras, inspection images, and other domain-specific signals. MCP gives developers a powerful way to expose these capabilities as discoverable tools and resources, but real-world computer vision brings challenges that do not disappear behind a simple tool call, including image quality, sensor differences, domain shift, uncertainty, validation, and human review.

In this session, I will explore practical patterns for integrating computer vision into the MCP ecosystem, including OCR, object detection, visual monitoring, and domain-specific inspection tools. The talk will focus on what MCP can standardize for agent-facing vision systems, what should remain domain-specific, and how developers can design safer, more reliable interfaces between AI agents and visual perception.

Speakers

Seowoo Han

Computer Vision Engineer / AI Engineer, B GARAGE

Seowoo Han is an AI Engineer and Computer Vision Engineer based in Korea, with 5+ years of experience building production-grade AI systems across OCR, object detection, drone-based visual inspection, edge video analytics, multimodal AI, RAG, and agentic workflows. She currently works... Read More →

Friday August 14, 2026 14:05 - 14:30 KST
Orchid 2

MCP Protocol in Depth

14:35 KST

Operating an AI Infrastructure Through MCP Apps on Agents - HyounKyoung Moon, Lablup

Friday August 14, 2026 14:35 - 15:00 KST

Orchid 2

GPU infrastructure has traditionally been operated through CLIs, dashboards, and a patchwork of admin tools. Each task — checking cluster state, allocating resources, launching sessions — forces the operator to switch context and stitch results together manually.

MCP changes the surface of this work. By exposing infrastructure operations as MCP tools, an agent can carry out cluster tasks on the operator's behalf. And with MCP Apps (SEP-1865), the agent doesn't just respond in text — it renders interactive UIs inline, so the operator can see the cluster, review the agent's plan, and approve actions visually within the same conversation.

This talk shows how an agent embedded in an MCP host can manage GPU infrastructure efficiently by combining:

- **Visual control via MCP Apps** — the agent renders cluster status views, resource allocation charts, and confirmation cards inline. The operator sees the infrastructure, reviews the plan, and clicks to approve.
- **Session-level control via MCP** — the agent creates, inspects, and modifies compute sessions through MCP tool calls.
- **Human-in-the-loop by design** — visual checkpoints make every consequential action explicit

Speakers

HyounKyoung Moon

AI Agentic Lead, Lablup

AI Product Engineer who builds AI Agent Platform and AI-first products across diverse stacks

Friday August 14, 2026 14:35 - 15:00 KST
Orchid 2

Building with MCP

10:55 KST

11:25 KST

11:55 KST

13:50 KST

14:20 KST

14:50 KST

15:45 KST

16:15 KST

16:45 KST

10:40 KST

11:10 KST

11:40 KST

13:35 KST

14:05 KST

14:35 KST

Get help with the event