How does a coding agent work and the hidden security hero in .NET!

Welcome to .NET Skåne February 2026 edition!

We are very happy to invite you to Ductus and an evening with our MVP Tore Nestenius!

Join us for an evening filled with two insightful presentations from Tore and one surprise talk from Jonah Andersson as well as networking and great company.

This event is free to attend and there will be free drinks and food. We hope to see you there!

IMPORTANT: If you have signed up to the event but can't make for some reason please cancel your spot in good time before the event so the spot is free for someone else to attend.

Agenda:
How Does a Coding Agent Work?
(Tore Nestenius)

Coding agents are increasingly used to automate software tasks, yet how they actually work is often treated as a black box. This talk breaks a coding agent down into its core mechanics: how it is structured, how it communicates with a language model, and how a text-only model can read and modify real source code.

We will cover:

* what a coding agent is, mechanically
* how agents communicate with language models
* how tools and MCP calls are executed
* how a text-only model works with source code
* how to build a basic coding agent in C#

The Anatomy of MCP Server: A Developer’s Perspective
(Jonah Andersson)
What does it really take to build an MCP server from scratch? In this session, we learn the anatomy of the Model Context Protocol (MCP) in the perspective for development from local to cloud — from how MCP different from API, how to build it, test it locally and deploy it on an app hosted on Azure.

Using Azure Functions with the MCP Tool Trigger extension for .NET, in this short session you will learn how to build a working MCP server step by step. You’ll leave with a clear mental model of how MCP servers work under the hood and the confidence to build your own.

The Data Protection API: The Hidden Security Hero in ASP.NET Core
(Tore Nestenius)
The Data Protection API protects authentication cookies, anti-forgery tokens, and other sensitive data in ASP.NET Core. It often “just works” in development, but in production it can cause broken logins and random sign-outs after redeployments or when scaling out behind a load balancer.

This session explains Data Protection from a production-first perspective. We will cover how key rings are created and rotated, why multi-instance setups fail, how purpose strings affect isolation and interoperability, and how to safely share authentication cookies across services.

About the speakers:
Tore Nestenius
Tore is a Microsoft .NET MVP, an Azure-certified developer, and an expert in areas like CQRS and event-sourcing, as well as web security and IdentityServer. Tore regularly shares his knowledge about .NET on his [blog](https://nestenius.se), focusing on security, Azure cloud, and authentication.

Jonah Andersson
Jonah Andersson is a Developer and Lead Cloud DevOps Engineer based in Sweden. She works as a Senior Azure Consultant. With a background in Computer Science and System Development, Jonah specializes in .NET technologies and excels in cloud development, particularly within Microsoft Azure.

Host:
Ductus
Tech Consulting with Expertise and Compassion
Ductus is a solution-oriented partner with a breadth of skills across digitalization. Our know-how, business acumen and a down-to-earth way of working ensure smooth and successful collaborations.

Join our Discord server or our GitHub repo.