Beat: mcp

15 pieces filed under mcp, newest first.

• Briefing · July 27, 2026 · morning

  Three institutions at three different layers, a protocol, a platform and a regulator, all shipped agent governance machinery inside the same ten days, while the…

• Briefing · July 26, 2026 · afternoon

  Two days before MCP ships the revision that makes agent tooling horizontally scalable, every fresh security finding says the same thing, which is that nothing above the…

• OpenWorker Is Local-First. Three Things About It Are Not.

  OpenWorker's local-first design is a claim about where your data sits, not about who can start the agent, and its Slack trigger, its scheduler, and its cloud OAuth…

• MCP Apps Let a Tool Server Draw the Interface You Click

  MCP Apps makes the server asking for permission the same party that renders the interface you grant it in, and half the safeguards in its security model are phrased as…

• Caveman Got to 85,000 Stars Shrinking What Your Agent Says. Now It Rewrites What Your Agent Reads.

  Caveman's own SKILL.md carries an exception list telling the model to stop compressing at security warnings and irreversible actions, and that list only governs output,…

• Briefing · July 25, 2026 · afternoon

  The agent harness is separating from the model vendor, with OpenWorker, the stateless MCP specification, and OpenAI's own Codex plugin for Claude Code all landing in the…

• WorldMonitor Runs Its AI on Your Machine First and Treats the Cloud as Backup. That's the Part Worth Stealing.

  WorldMonitor's 54k-star situational-awareness dashboard matters less as an intelligence product than as a shipped template for local-first AI that runs on Ollama with no…

• Briefing · July 23, 2026 · morning

  The same week vendors raced to ship enterprise agent-deployment platforms, the plumbing beneath them (MCP) was rebuilt for stateless scale and hardened auth, and a wave…

• MCP Just Got Write Access to Houdini, Unreal, and Your VFX Pipeline

  MCP just moved from read-only lookups to write access inside production creative apps (edit keyframes, build node trees, render frames), which flips the risk model from…

• Briefing · July 22, 2026 · morning

  MCP became load-bearing infrastructure: the protocol went stateless (RC, final July 28) while MCP servers landed in the pro creative stack, an enterprise asset graph,…

• MCP Enterprise-Managed Authorization, the Claude Apps Gateway, and ARD All Stop at the Same Line

  Every agent governance layer that shipped or stabilized this month authorizes connections and not actions, and each spec says so in its own security section (EMA stable…

• Briefing · July 20, 2026 · afternoon

  A control plane arrived (MCP Enterprise-Managed Authorization stable, AWS Claude apps gateway, Google tool-discovery spec, Anthropic CISO playbook) that decides which…

• Briefing · July 20, 2026 · morning

  The industry agreed agents should never touch source material directly, only curated projections (credential broker, knowledge compiler, code-graph layers), and…

• Wigolo Gives Your AI Agent the Whole Web for $0 and No API Keys. The Catch Is What Comes Back.

  Wigolo's real value is collapsing all web access into one local MCP surface with a $0 per-query meter and nothing leaving ~/.wigolo/, but "free and keyless" also deletes…

• Briefing · July 17, 2026 · morning

  The interesting layer moved from the model to the permission boundary around it: 1Password credentials Claude never sees, MCP auth moving onto OAuth and OpenID Connect,…