# Hrittik Roy

Building Communities. Driving Product Growth.

I help engineering teams and open source communities get more out of your product through demos, documentation, talks, and deep dives into **AI Infrastructure**, **developer workflows**, and **platform engineering**. The goal is always the same: **take something complex and make it click.**

I write, speak, and build in this space.

## Navigation

- About: https://hrittikhere.com/about
- Blog: https://hrittikhere.com/posts
- Talks: https://hrittikhere.com/talks
- Bookshelf: https://hrittikhere.com/bookshelf
- Research Papers: https://hrittikhere.com/papers

## Featured Writing

## [Build a Secure MCP Server with Keycloak, Go, and RFC 8693 Token Exchange (Part 1)](https://hrittikhere.com/posts/build-secure-mcp-server-keycloak-rfc8693)
- Published: Jul 5, 2026
- Category: MCP
- Tags: mcp, keycloak, oauth2, token-exchange, go, security, rfc8693
- Summary: Learn to implement token tiering in MCP servers using RFC 8693 token exchange with Keycloak, separating read and write permissions with audience-bound, short-lived tokens.

## [Stop Re-downloading Your Models: A Practical Guide to Model Caching on Kubernetes with GKE](https://hrittikhere.com/posts/model-caching-kubernetes-gke)
- Published: July 04, 2026
- Category: Kubernetes
- Tags: Kubernetes, GKE, vLLM, LLM Inference, Model Caching, Hugging Face, AI Infrastructure
- Summary: Download a large LLM once, mount it everywhere. A practical guide to caching Hugging Face models on Kubernetes with a PVC, a download Job, and vLLM on GKE.

## [Sandboxing Claude and MCP: a dive into Docker sbx](https://hrittikhere.com/posts/sandbox-claude-code-mcp-docker-sbx)
- Published: Jul 1, 2026
- Category: Security
- Tags: Docker, Security, AI Agents, MCP, Claude Code
- Summary: A hands-on walkthrough of Docker Sandboxes (sbx): boot Claude Code in Locked Down mode, watch outbound requests get blocked, and allow domains one at a time until governance actually works.

## Agent Resources

- Agent metadata: https://hrittikhere.com/.well-known/agent-metadata.json
- LLM guidance: https://hrittikhere.com/llms.txt
- Sitemap: https://hrittikhere.com/sitemap.xml
- RSS: https://hrittikhere.com/rss.xml