.tip

Jun 11, 2026 · one of the small things

Fewer MCP servers, more skills

Tool schemas cost tokens on every turn. A skill costs tokens once, when its description matches the task. If the agent got slower and more confused as you added servers, disconnect the ones no procedure needs and write the procedures down.

.claude/skills/release/SKILL.md
---
name: release
description: Cut a release of a package in this monorepo.
---

The skill file doubles as the best documentation the team has, because it is the only one that gets exercised daily.

ai-agentsdeveloper-experience

Longer version: the post this came from.

~/tips/today — 2026-09-04

~cat tips/today

Session cookies: HttpOnly, Secure, SameSite=Lax

securityhttp

Three attributes, each closing a class of attack. HttpOnly keeps scripts from reading it. Secure keeps it off plain HTTP. SameSite=Lax stops it being sent on cross-site POSTs, which is most CSRF.

Set-Cookie: session=...; HttpOnly; Secure; SameSite=Lax; Path=/; Max-Age=1209600

Strict breaks arriving from an external link while logged in. Lax is the default worth keeping.

↵ open y yesterday l ls /tips

esc close