CollabDays Belgium 2026

24/10/2026, De Montil
Affligem, Belgium

From MD to UI: How MCP Apps can change your world

Flipping it: Instead of AI living inside your apps, your apps now live inside AI! Instead of sending users to yet another tab, your application now lives directly inside the AI conversation. interactive, real-time, and context aware. In this session, we skip the theory and start with a live demo. You will see an MCP App running inside Copilot chat window, handling a real workflow without a single context switch. From there, we peel back the layers: what an MCP App is actually made of, how the host layer and your server divide responsibilities, and what the security primitives look like in practice. Then we get seriou: Authentication and SSO is the part that bites most teams, and we cover it properly. We walk through OAuth 2.1 with PKCE as the spec requires it, show how to wire enterprise SSO through Entra ID, and discuss what token scoping and consent flows look like when the window is owned by Microsoft as is in Microsoft Teams. We also cover the pitfalls: over-permissioned tokens, session handling across conversations, and prompt injection risks that come with rendering UI inside a chat interface. You will leave with a working mental model, a clear decision framework for what you must build versus what the platform handles, and enough practical knowledge to start building MCP Apps that are actually ready for production.