Magento and MCP
Magento MCP: a thin wrapper over the REST API that lets you drive products, content, and promotions by conversation — with honest limits on what it can do.
Blog
Articles on Magento 2 performance, architecture, and platform engineering — field notes from production work.
-
Article
Magento 2 Incident Recovery: 6 Scenarios and a Runbook
Magento 2 incident recovery as a runbook, not a panic: six real scenarios with diagnosis flowcharts, timed recovery steps, and comms templates.
-
Article
Magento 2 Security Hardening: 9 Layers, Owned and Costed
Magento 2 security hardening as an owned, costed plan: SSO before 2FA, upload bypasses that still work, composer audit, and what breach tooling costs.
-
Article
Magento 2 Passkeys: The Mage-OS Module, Tested
Magento 2 passkeys for customers and admins, tested on 2.4.8-p5: what the Mage-OS module does well, three traps to check first, and why not to build your own.
-
Article
Magento INP and CLS: Fixing the Two Hard Vitals
Magento INP and CLS are the vitals lab tools barely see: long tasks on add-to-cart, and the layout shifts that make customers tap the wrong button.
-
Article
Magento JavaScript Optimization: Audit and Defer
Magento JavaScript optimization starting where it pays: auditing what extensions actually load, then deferring it without breaking RequireJS.
-
Article
Magento Responsive Images and Preload
The template half of Magento LCP work: view.xml sizes, a srcset override that stops lazy-loading the LCP image, and preloading it properly.
-
Article
Magento LCP Images: Measure First, Then Convert
Magento LCP images: where the time actually goes, automatic AVIF and WebP conversion, and the one image you must never lazy-load.
-
Article
Magento REST API Content Negotiation: XML, Bulk, and YAML
Magento REST API content negotiation already works today — XML on request, a documented Bulk API quirk, and how to add your own format cleanly.
-
Article
Magento TTFB: Varnish, Redis and the Backend Cost
Magento TTFB is the floor every other Core Web Vitals fix sits on: production mode, Varnish, Redis, database indexes, and the PHP work underneath them.
-
Article
Magento Attack Surface: Don’t Ship Code You Don’t Need
StyleSmuggler (CVE-2026-75650) hit fully patched Magento 2 stores through GraphQL — a feature most of them never used. Patch, then stop shipping it.
Written as a set
Some of these run as a series with a reading order — how the series work. Parts still to come are listed with the date they land.
Magento Core Web Vitals
Magento 2 Core Web Vitals from red to green: what the metrics measure, which level to fix first, who owns each task, and where optimization stops paying.
8 parts · 6 available now
- Start hereMagento 2 Core Web Vitals: From Fails to Passes
- Magento Theme Performance: Hyvä or Luma?Oct 30
- Magento TTFB: Varnish, Redis and the Backend Cost
- Magento JavaScript Optimization: Audit and Defer
- Magento LCP Images: Measure First, Then Convert
- Magento Responsive Images and Preload
- Magento Font Optimization: Self-Hosted, Non-BlockingNov 3
- Magento INP and CLS: Fixing the Two Hard Vitals
Magento ERP Integration
Magento ERP integration in build order: which endpoints to build first so design, content and SEO stop waiting on sample data.
10 parts · first on Nov 6
- Start hereMagento ERP Integration: Products, Customers, OrdersNov 6
- Magento Product Import via REST: What Actually BreaksNov 10
- Magento REST API Stock and Prices: Not a Product SaveNov 13
- Magento Product Attributes via REST: Options, LabelsNov 17
- Magento Categories via REST: An Entity With No KeyNov 20
- Magento Product Media via REST: Roles and ScopeNov 24
- The Magento Parent Product That Never Comes Back In StockNov 27
- Magento REST Customer Integration: What an ERP Feed BreaksDec 1
- Magento Async Bulk API: What the 202 Doesn’t Tell YouDec 29
- Magento SAP Integration When You Know Neither SystemJan 26