<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://agentarmorhq.com/practices/build-a-fresh-mcp-server-and-transport-per-client-session</loc>
<lastmod>2026-10-26T02:56:32.112Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/validate-session-ids-before-resuming-an-agent-sdk-session</loc>
<lastmod>2026-10-26T02:51:14.566Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/verify-plugin-commit-pins-after-installing-claude-code-plugins</loc>
<lastmod>2026-10-26T02:54:08.767Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/cap-request-body-size-and-set-maxtoolinputelements-on-mcp-servers</loc>
<lastmod>2026-10-26T02:51:22.536Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/upgrade-to-mcp-sdk-1-26-0-and-stop-sharing-transports</loc>
<lastmod>2026-10-26T02:08:00.971Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/set-idle-timeouts-and-session-caps-on-streamable-http-servers</loc>
<lastmod>2026-10-26T02:01:38.709Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/allowlist-mcp-stdio-commands-and-validate-arguments-at-launch</loc>
<lastmod>2026-10-26T02:58:13.287Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-mcp-server-git-to-2025-12-18-or-later-and-set-repository</loc>
<lastmod>2026-10-26T02:01:43.772Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/enable-dns-rebinding-protection-on-local-http-mcp-servers</loc>
<lastmod>2026-10-26T02:01:46.174Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/update-claude-code-to-latest-and-open-only-trusted-directories</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/re-approve-mcp-server-entries-whenever-their-configuration-changes</loc>
<lastmod>2026-10-26T02:01:52.541Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/require-an-api-key-before-exposing-an-mcp-http-stream-server</loc>
<lastmod>2026-10-26T02:10:40.754Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-the-filesystem-mcp-server-to-2025-7-1-or-later-and-narrow-its-allowed-directories</loc>
<lastmod>2026-10-26T02:02:12.844Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/upgrade-figma-developer-mcp-to-0-6-3-and-review-your-exec-calls</loc>
<lastmod>2026-10-26T02:02:11.210Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/review-every-agent-write-to-mcp-config-files-before-approving-it</loc>
<lastmod>2026-10-26T02:02:13.834Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/scope-mcp-database-connections-to-one-project-and-read-only-roles</loc>
<lastmod>2026-10-26T02:02:22.589Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/remove-and-replace-any-extension-build-you-installed-from-version-1-84-0</loc>
<lastmod>2026-10-26T02:02:30.839Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/disable-mcp-plugins-and-api-keys-until-patched-version-is-installed</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/upgrade-mcp-remote-to-0-1-16-or-later-before-connecting-to-any-server</loc>
<lastmod>2026-10-26T02:02:30.612Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/keep-local-mcp-http-servers-off-browser-reachable-networks-and-validate-host-headers</loc>
<lastmod>2026-10-26T02:02:33.964Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/restrict-mcp-file-reading-tools-to-an-explicit-directory-allowlist</loc>
<lastmod>2026-10-26T02:02:39.176Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-mcp-client-sdk-versions-before-trusting-stored-oauth-credentials</loc>
<lastmod>2026-10-26T02:02:45.289Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/turn-off-always-allow-for-agent-tool-calls-on-repository-content</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/create-read-only-database-roles-instead-of-trusting-mcp-read-only-flags</loc>
<lastmod>2026-10-26T02:02:55.394Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/upgrade-mcp-inspector-to-0-14-1-and-keep-it-off-shared-networks</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/upgrade-cline-and-reject-foreign-origins-on-local-agent-dashboards</loc>
<lastmod>2026-10-26T02:03:16.749Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/allowlist-gitlab-api-base-urls-so-tokens-never-reach-unknown-hosts</loc>
<lastmod>2026-10-26T02:03:06.785Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pass-transport-options-as-a-single-requestinit-object</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/reject-empty-bearer-tokens-and-replace-placeholders-on-http-mcp-servers</loc>
<lastmod>2026-10-26T02:03:29.328Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/verify-mcp-server-tokens-with-a-direct-api-call-first</loc>
<lastmod>2026-10-26T02:03:29.561Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/update-mcp-sdk-and-inspector-then-retest-oauth-flows</loc>
<lastmod>2026-10-26T02:03:31.427Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/re-run-mcp-login-and-verify-server-identity-after-tool-failures</loc>
<lastmod>2026-10-26T02:03:43.116Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-versions-and-upgrade-before-debugging-api-configuration-errors</loc>
<lastmod>2026-10-26T02:08:12.068Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/scope-each-mcp-tool-s-token-before-you-launch-its-server</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/start-a-fresh-thread-from-a-summary-to-keep-long-sessions-focused</loc>
<lastmod>2026-10-26T02:03:35.844Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-authorization-headers-reach-your-mcp-server-through-inspector</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pass-api-tokens-at-runtime-instead-of-baking-them-into-images</loc>
<lastmod>2026-10-26T02:03:49.780Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/return-only-the-file-text-an-agent-needs-to-keep-token-usage-low</loc>
<lastmod>2026-10-26T02:04:08.819Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-your-mcp-server-and-client-versions-before-debugging-login-failures</loc>
<lastmod>2026-10-26T02:04:18.415Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/find-the-failing-mcp-server-before-changing-any-environment-variables</loc>
<lastmod>2026-10-26T02:04:27.343Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/use-cmd-c-to-launch-npx-based-mcp-servers-on-windows</loc>
<lastmod>2026-10-26T02:04:04.492Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/test-a-provider-endpoint-with-curl-before-wiring-it-into-an-agent</loc>
<lastmod>2026-10-26T02:04:46.400Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-mcp-server-packages-to-exact-versions-instead-of-latest</loc>
<lastmod>2026-10-26T02:04:27.172Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-your-node-and-npx-setup-before-debugging-an-mcp-server-launch</loc>
<lastmod>2026-10-26T02:04:33.296Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/give-each-project-its-own-named-chrome-devtools-mcp-server-entry</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-oauth-scopes-are-actually-sent-when-connecting-mcp-remote</loc>
<lastmod>2026-10-26T02:04:34.487Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/choose-read-only-mcp-tools-when-your-agent-only-needs-research</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/limit-the-atlassian-mcp-server-to-read-and-search-capabilities</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/give-a-github-mcp-token-only-the-repo-scopes-it-needs</loc>
<lastmod>2026-10-26T02:05:05.860Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/limit-each-hosted-mcp-server-to-the-access-it-needs</loc>
<lastmod>2026-10-26T02:04:47.102Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-that-each-mcp-tool-s-oauth-scope-matches-its-permission</loc>
<lastmod>2026-10-26T02:05:01.794Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/test-the-mcp-server-s-stdio-command-before-wiring-it-into-docker</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/review-a-generated-permission-manifest-before-trusting-it</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-a-container-binary-has-execute-permission-before-running-it</loc>
<lastmod>2026-10-26T02:05:13.074Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/import-agents-md-into-claude-md-instead-of-duplicating-shared-instructions</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/save-your-session-state-before-restarting-a-frozen-cli-session</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-your-coding-agent-tools-to-a-version-that-works</loc>
<lastmod>2026-10-26T02:05:18.300Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-mcp-server-dependencies-so-new-sdk-releases-cannot-break-startup</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/plan-around-rate-limits-when-mcp-tools-fire-parallel-requests</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/diagnose-a-stalled-mcp-session-before-you-resume-the-agent-run</loc>
<lastmod>2026-10-26T02:05:49.254Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-your-installed-mcp-sdk-version-before-trusting-a-documented-fix</loc>
<lastmod>2026-10-26T02:05:56.266Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-your-mcp-sdk-version-and-wire-format-before-debugging-transport-errors</loc>
<lastmod>2026-10-26T02:05:51.482Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-one-zod-copy-that-matches-your-mcp-sdk-to-avoid-type-errors</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/keep-one-mcp-config-source-and-confirm-which-file-each-tool-reads</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/run-continue-mcp-servers-from-wsl-with-a-bash-wrapper-config</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-the-pinned-sdk-version-before-upgrading-your-mcp-adapter</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-claude-code-to-a-known-good-version-and-stop-silent-updates</loc>
<lastmod>2026-10-26T02:11:30.589Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pin-claude-code-to-a-reviewed-version-and-review-each-bump</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/verify-which-extension-version-actually-fixed-your-checkpoint-problem</loc>
<lastmod>2026-10-26T02:06:41.027Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/verify-your-installed-mcp-package-matches-its-published-source-before-relying-on-it</loc>
<lastmod>2026-10-26T02:06:38.146Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-mcp-server-versions-and-run-one-test-before-relying-on-it</loc>
<lastmod>2026-10-26T02:06:54.931Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confirm-the-pi-mcp-adapter-does-not-log-or-cache-your-tokens</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/move-your-firecrawl-api-key-out-of-shared-mcp-config-files</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/check-credential-handling-in-mcp-use-before-connecting-real-accounts</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/limit-apify-tokens-to-the-actors-your-mcp-agent-needs</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/verify-an-npm-package-s-publisher-and-source-before-running-npx</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/give-an-argo-cd-mcp-server-read-only-access-by-default</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/review-generated-ui-components-and-pasted-text-before-running-them</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/give-each-swarm-agent-its-own-narrowly-scoped-api-key</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/pass-trendradar-api-keys-as-environment-variables-not-in-docker-commands</loc>
<lastmod>2026-10-26T01:43:29.129Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/confine-a-terminal-running-mcp-server-to-a-limited-folder-and-account</loc>
<lastmod>2026-10-26T02:09:29.437Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
<url>
<loc>https://agentarmorhq.com/practices/move-trading-api-keys-for-vibe-trading-out-of-plain-text-config</loc>
<lastmod>2026-10-26T02:12:00.072Z</lastmod>
<changefreq>monthly</changefreq>
<priority>0.6</priority>
</url>
</urlset>
