Ahmet Soormally

Ahmet Soormally

Principal Solutions Engineer at WunderGraph

Bio

Ahmet is a Principal Solutions Engineer at WunderGraph, helping teams adopt Cosmo. He leads technical evaluations, builds prototypes, and runs workshops to accelerate adoption, while improving SDKs, documentation, and onboarding to enhance the developer experience.

Where Does API Complexity Live?
Blog
April 28, 2026

Where Does API Complexity Live?

Compare REST, GraphQL, and federation by where the complexity actually lives — data fetching, caching, security, contracts, and governance.

Read post
Per-Tool OAuth Scopes for MCP, Derived from Your Schema
Blog
April 17, 2026

Per-Tool OAuth Scopes for MCP, Derived from Your Schema

Enforce per-tool OAuth scopes on MCP servers using your GraphQL schema. AI agents get least-privilege access with automatic scope step-up — no BFF needed.

Read post
ConnectRPC: Generate Typed SDKs from Your GraphQL API
Blog
March 18, 2026

ConnectRPC: Generate Typed SDKs from Your GraphQL API

Cosmo ConnectRPC compiles GraphQL operations into Protocol Buffers and serves them as gRPC, REST, and typed SDKs — no separate API layer required.

Read post
Why MCP Is the Ceiling, Not the Foundation of Enterprise AI Agent Architecture
Blog
March 9, 2026

Why MCP Is the Ceiling, Not the Foundation of Enterprise AI Agent Architecture

MCP standardized how AI agents invoke tools — but not what they can see or do. Here's why the real bottleneck in enterprise AI is data readiness, not protocol adoption.

Read post
MCP Scope Step-Up Authorization: From Implementation to Spec Contribution
Blog
March 5, 2026

MCP Scope Step-Up Authorization: From Implementation to Spec Contribution

Cosmo's MCP server already exposes your graph as AI-ready tools. When we added per-tool OAuth scope step-up authorization so clients don't need a god token, we hit an infinite loop. The root cause: a gap between the MCP spec and RFC 6750 on scope challenges, plus SDK behavior that overwrites scopes instead of accumulating them. Here's what we found and how we're approaching it.

Read post
GraphQL Operation Descriptions: How a Spec Update Solved Our MCP Problem
Blog
October 30, 2025

GraphQL Operation Descriptions: How a Spec Update Solved Our MCP Problem

The September 2025 GraphQL spec update added official support for operation descriptions. This solved a real problem: how to document GraphQL operations for MCP tools without custom hacks or non-standard conventions.

Read post
MCP Gateway with Curated GraphQL Persisted Operations
Blog
October 17, 2025

MCP Gateway with Curated GraphQL Persisted Operations

Curated GraphQL Persisted Operations (POs) provide a secure, task-level facade for exposing APIs to LLMs via the Modex Context Protocol (MCP). They reduce complexity, enforce security, and ensure stable tool use compared to raw REST APIs.

Read post