Beat: mcp

106 pieces filed under mcp, newest first.

• ThinkingBox Trains Agents by Grading the Database, Not the Transcript

  ThinkingBox turns a passing test into a training reward by grading the final database state instead of the tool calls, and a mid-size model gets more repeatable at the…

• ALTK-Evolve Lets Your AI Agent Write Its Own Rulebook

  IBM's open-source ALTK-Evolve improves an agent by turning its own past successes and failures into short prompt rules with no weight changes, which beat frontier models…

• Briefing · October 21, 2026 · afternoon

  Machines now find bad code in minutes, both bugs and malware, and the slow part is the small group of people and pipelines that have to act on what they find.

• Your Coding Agent Is Guessing What Your Change Breaks. AxiomCode Graph Hands It a Map

  AxiomCode Graph replaces name-matching grep with a type-aware call graph that coding agents query through MCP, and its real value lies in the confidence tier on every…

• REA Turns Coding Agents Into Reverse Engineers. "Local" Doesn't Mean the Evidence Stays Put.

  REA's MCP server does its reverse engineering on your machine, but every finding it returns lands in the agent's conversation and travels to that agent's model provider,…

• Briefing · October 18, 2026 · afternoon

  The bottleneck on agent work has moved to the people around it, as Anthropic's own data puts about 80% of interactive Claude session time on waiting for a human, FDE-Gym…

• xerj Gives Your Coding Agent a Local Search Engine. Here's Where It Pays Off.

  Xerj's own study shows a local index saves a coding agent tokens only on code the model has not memorized, so point it at private repos and run it with its default auth…

• Concat Lets AI Agents Edit Video Through a Local API

  Concat turns a free video editor into something an AI agent can drive through a token-gated local JSON-RPC API, but its MCP server is planned rather than shipped and the…

• OpenCode 2.0 Stops Calling Your MCP Tools One at a Time

  OpenCode 2.0 puts every MCP server into Code Mode by default, so tools become functions an agent chains in one script, which saves context and round trips but means one…

• Briefing · October 15, 2026 · morning

  Agent tools are making more choices on the builder's behalf, with OpenCode 2.0 routing every MCP server through Code Mode by default and Copilot's HydraFusion picking…

• Context-Mode Makes Your Coding Agent Search Its Tool Output Instead of Reading It

  Context-mode's reusable idea is making a coding agent search tool output instead of reading it, and its sandbox guards the context window, not your machine, because the…

• God's Eye View Is MIT Licensed. Its Data Isn't Yours to Sell.

  God's Eye View's MIT license covers only its code while its bundled and live data carry non-commercial, share-alike and proprietary terms, so a data-heavy AI repo needs…

• Pensieve Turns Your Coding Agent's Grep Loop Into One Search

  Pensieve's own benchmark shows a local MCP index finds code in fewer, cheaper agent steps than grep while losing on exact error strings, and its broad default sources…

• Briefing · October 11, 2026 · morning

  Between October 9 and 11, a game decompilation writeup and a unikernel essay showed agent output becoming trustworthy only when checked against a ground truth the agent…

• Docker Agent Lets You Pull an AI Agent Like an Image. Its Docs Say Not to Trust It Like One

  Docker Agent lets anyone run an AI agent straight from an OCI registry, but its own docs call permissions client-side and not a security boundary for untrusted agents,…

• anthropics/knowledge-work-plugins Is a 123-Plugin Marketplace Now

  Anthropics/knowledge-work-plugins is now a 123-entry marketplace whose README still describes 11 plugins, and its own sales plugin declares 23 MCP servers while…

• Briefing · October 7, 2026 · afternoon

  On October 7 Anthropic priced its new small model about 90 percent below Haiku 4.5 for prompts under 100K tokens and OpenAI wrapped GPT-6 in a UI compiler, while…

• REA Lets Claude Code and Codex Reverse Engineer Any App, So Treat Your Shipped Client as Readable

  REA puts native decompilation, Electron and source-map analysis and .NET inspection behind one local MCP server for six coding agents, which turns explaining any shipped…

• Briefing · October 5, 2026 · morning

  Over the past week the vendor AI app became the contested surface, as OpenAI announced ad slots for ChatGPT image generation and a Florida arrest report, picked up on…

• claude-mem 13.29.0 Adds the One Kind of Agent Memory You Can Audit

  Claude-mem 13.29.0 adds a keyed, append-only work-state ledger beside its SQLite and Chroma recall, which splits agent memory into state the agent writes on purpose and…

• OpenAPPA Takes the Security Call Away From the Model

  OpenAPPA bets that an agent's permission question should be answered by deterministic data-flow rules instead of a model's judgment, and its protection is only as good…

• Monid Gives Your Agent One Key to 2,000 Tools. Who Holds the Wallet?

  Monid-ai/monid collapses dozens of provider keys into one metered key whose discover step ranks tools by price and health, which turns the agent into the purchasing…

• Figma's MCP Allowlist Is Spec-Compliant, and That's the Real Problem

  Figma's 403 for unlisted MCP clients is allowed by the MCP authorization spec, which makes open client registration optional and lets servers keep allowlists, so MCP…

• Cloudflare's Monetization Gateway and Pay Per Use Split Agent Payments in Two

  Cloudflare's same-day launch of a 402 toll and a self-reported per-use royalty shows agent payments splitting into a price the seller enforces and a count the buyer…

• Briefing · October 1, 2026 · afternoon

  On October 1 the routing call kept moving into small dedicated models, as Cloudflare open-sourced the Clef decision models and LangChain reported a harness-level router…

• MCP Agents Can Credit a True Claim to the Wrong Source, and Your Fact-Checker Will Pass It

  In multi-server MCP agents a pooled fact-checker passes true claims credited to the wrong server, so the citation is the untested output, and per-source checking is now…

• Briefing · September 30, 2026 · afternoon

  On September 29 and 30 chain of custody became the agent story, as OpenAI attributed a core cluster of a July reasoning-extraction campaign to individuals associated…

• NVIDIA OpenShell and the Blind Spot in Out-of-Band Agent Enforcement

  Out-of-band agent enforcement like NVIDIA OpenShell and Sentry governs what an agent sends and where, but its request rules default to audit and MCP server responses…

• Briefing · September 29, 2026 · afternoon

  OpenAI's DevDay turned agents from sessions into standing workers with Dots, a hosted Agents API with computer use and MCP-triggered plugin automations, and on the same…

• Briefing · September 29, 2026 · morning

  On September 28 OpenAI admitted its training agents reached four Australian government systems, Nvidia shipped agent enforcement that sits below the agent in kernels and…

• Attestix Signs Your AI Agent's Paperwork, Not the Law

  Attestix's hash-chained, signed audit trail is useful evidence plumbing for agents today, but its compliance layer hardcodes a third-party assessment rule that Article…

• mobile-mcp Gives an Agent Thirty Tools and a Real Phone

  Mobile-mcp drives phones from the native accessibility tree instead of screenshots, which makes agent phone control cheap and precise and also turns every labeled field…

• Briefing · September 27, 2026 · afternoon

  The control surface for agents is moving out of the model and into managed settings files, signed execution records, and red-team runs seeded from production traces.

• Briefing · September 21, 2026 · afternoon

  Every launch on today's board is gated by an ordinary software-supply fact rather than a model capability, a package platform, a retention line, a hand-written enum, a…

• Briefing · September 21, 2026 · morning

  The agent stack spent the weekend arguing about where a decision gets computed, pushing it up into a cluster runtime or down onto a laptop, while the first shared test…

• Hister Indexes Everything You Read and Hands It to Your Agent. Its Own Docs Explain Why That Is a Problem.

  Hister is an MCP server where every record is attacker-authored by construction, and its answer is to label untrusted content rather than sanitize it, which moves the…

• Skills Over MCP vs Specialist Agents: Microsoft's Own Trace Says Fewer Calls, More Tokens

  A specialist agent is usually a SKILL.md and three tools wearing a model, and Microsoft's own trace shows that removing the model halves latency and calls while raising…

• Briefing · September 17, 2026 · afternoon

  Agent memory and agent instructions are converging on plain files a human can read and Git can diff, and four vendors published an instance of that in 48 hours.

• Busbar Puts a Governed Boundary Between Your Agents and Everything They Can Reach

  A single enforcement point in front of model calls, MCP tools, and agent-to-agent delegation is the concrete form of this month's supervision-as-runtime trend, and…

• OpenConnector Moves Provider Secrets Out of Your Agent, and the 1,490-Provider Catalog Is Not What You Self-Host

  OpenConnector's real product is moving provider secrets out of the agent process and behind a runtime boundary you own, and the catalog number that sells it is a…

• LangChain Connections Gives Agents Per-Caller Identity, and Turns a Missing Permission Into a Question

  Per-caller credential resolution only becomes practical when a missing grant pauses the run and asks instead of throwing, which turns a permission gap from an exception…

• ripwire Hands Coding Agents a Repo Map Instead of grep. Its Most Convincing Number Is the One That Got Worse.

  Ripwire earns trust not with its 52x headline but by re-running its own head-to-head, publishing a corrected margin of 1.46x instead of the 1.75x its older tables…

• Briefing · September 7, 2026 · afternoon

  What an agent loads has become the thing worth managing, and the week's launches are almost all knobs on that inventory rather than new capability.

• OKF Agent Memory Puts Your Agent's Memory in Git. The Cost Is Buried in the Word BM25

  Okf-agent-memory trades semantic recall for lexical recall and prices the trade as a latency win, so the reviewable-memory benefit is real but arrives with a retrieval…

• Briefing · September 6, 2026 · morning

  Agent capability work has moved from the model to the box the model runs in, and this week showed both halves of that shift at once, labs industrializing the manufacture…

• MCP's destructive_hint Is Not a Security Boundary, and LangChain v1.4.0 Just Made It Easier to Forget

  MCP tool annotations are self-declarations by the server you are trying to constrain, so they belong in your UX and never in your safety guarantee, which has to live in…

• Briefing · September 4, 2026 · afternoon

  Four launches in four days all moved the same piece, the control point sitting between an agent and everything it can touch, and each one moved it somewhere different.

• anthropics/commerce-agents: The Checkout URL Never Reaches the Model

  Anthropics/commerce-agents is worth reading as a boundary specification rather than a codebase, because its safety guarantees live in methods the backend interface does…

• Claude Code 2.1.259 Changed What Your MCP Allowlist Covers, and the Docs Still Say Otherwise

  Claude Code 2.1.259 narrowed allowedMcpServers to servers users add, so a managed-mcp.json server your allowlist used to filter out now loads on upgrade, while the…

• Briefing · September 3, 2026 · afternoon

  Three agent launches in three days ship the same primitive, a human confirmation in front of the irreversible step, while a measurement of the retrieval layer those…

• Briefing · September 3, 2026 · morning

  The unit that now carries agent capability between machines is an installable Agent Skill fronted by an instruction file, and every governance control that shipped this…

• Busbar Calls Itself an Execution Boundary for AI. Read the Block Quote Before You Plan Around It.

  Busbar's README promises an execution boundary across models, MCP tools, and A2A agents, and its own callout says only the model plane is demonstrated today, so treat…

• codex-with-chatgpt Says Your Repository Is Never Uploaded. Read That Sentence Again.

  Codex-with-chatgpt's read-only MCP bridge is unusually careful security engineering, and its own reassuring line about never uploading your repository is true only about…

• OpenConnector Takes the Token Away From Your Agent. The OAuth Work Does Not Go Anywhere.

  OpenConnector genuinely removes provider credentials from the agent process, but its own README says plainly that every self-hosted path leaves you registering and…

• Briefing · August 28, 2026 · afternoon

  Every significant thing shipped in the last 48 hours is an argument about the execution boundary, where an agent's reach stops, and two of the biggest arguments point in…

• Briefing · August 27, 2026 · afternoon

  Agents were handed a standard interface to physical laboratory hardware on the same day one benchmark showed they finish a fifth of end-to-end scientific workflows and a…

• Codex Deprecated Its MCP Server, Not MCP. The Direction of That Cut Is the Story

  Codex stopped serving MCP while expanding its MCP client support in the same release, and that one-directional cut marks the real boundary of the protocol: MCP is for…

• One Success Isn't Reliability: The Agent Number Almost Nobody Reports

  Running an agent workflow once and watching it succeed measures almost nothing, because success collapses under repetition and the failures that remain terminate cleanly…

• Briefing · August 25, 2026 · afternoon

  The measurement layer stopped being a bolt-on and became the shipped product, with LangChain releasing three separate agent-grading systems in one day while OpenAI's CFO…

• x64dbg-MCP Server Gives an Agent 71 Debugger Tools and Ships Listening on 0.0.0.0

  X64dbg-MCP Server proves agentic reverse engineering works today, and its hand-rolled static bearer token sent in cleartext to a default bind of 0.0.0.0 shows what…

• Cloudflare's Optional OAuth Scopes Make Partial Grants Normal, and Most Agents Will Break On Them

  Cloudflare's optional OAuth scopes turn partial grants into a routine outcome, so every agent and MCP server that assumes it received the scopes it requested now carries…

• Briefing · August 24, 2026 · morning

  Four separate shipments this weekend attack the same broken assumption, that a human sits in a browser to approve what software does, and the replacement being built is…

• Briefing · August 23, 2026 · morning

  Across protocol, infrastructure, tooling and research this weekend, the same move keeps repeating, replacing a stated claim with a mechanically checkable one.

• Briefing · August 21, 2026 · morning

  Four vendors shipped narrower permissions at the exact moment an agent acts, and a Rust crate that ran malware during cargo build showed why the moment of execution is…

• CopilotKit's OpenBot Writes the Audit Row Before the Action

  OpenBot's reusable idea is the ordering rather than the sandbox: the audit row is written before the action so a crashed or refused call still leaves a record, and that…

• Briefing · August 20, 2026 · afternoon

  The agent skill turned into a package format this year, and the packaging shipped well ahead of the registry, the signature, and the scanner that a package format…

• Microsoft Foundry Moved Agent Tool Permissions Into a Request Parameter, and the Denylist Fails Open

  Foundry moved agent tool governance into per-request parameters, and Microsoft's own operational checklist says the denylist form of that control warns instead of…

• Briefing · August 19, 2026 · morning

  Three labs spent this week engineering containment against their own models, and the thing being contained is offensive security capability that arrived faster than any…

• Briefing · August 16, 2026 · afternoon

  The competition moved off the model and onto the harness, and the plugin ecosystem that formed around DeepSeek Harness in 72 hours is what a platform land grab looks…

• chrome-devtools-mcp Shipped a CLI and a Skill. That Moved the Approval Gate.

  Chrome-devtools-mcp is no longer only an MCP server, and shipping a CLI plus a skill that tells the agent to write shell scripts against a live browser moves browser…

• MCP Server Security: 12,520 Exposed Servers and What the Scans Actually Found

  MCP's exposure problem is a deployment-default problem rather than a spec problem, because the protocol never required authentication and internet scan data shows a…

• Briefing · August 13, 2026 · morning

  Five vendors spent the past week shipping infrastructure whose primary user is an agent rather than a person, a browser, a wallet, a 14-day runtime, a local model tuned…

• Corsair Makes the Approval Gate a Database Row Your Agent Cannot Reach

  Corsair's load-bearing move is putting both the credentials and the pending approval into your database instead of the model's context, which turns permission from a…

• Briefing · August 11, 2026 · afternoon

  Almost nothing shipped in the last 48 hours is a new agent, it is an attachment to an agent harness developers already run, and the connective tissue those attachments…

• Briefing · August 11, 2026 · morning

  On the same day, one vendor put its strongest agentic capability behind identity verification and hardware keys while another gave a capable agent model away under…

• Qwen-MM-Plugins Gives Your Coding Agent Eyes Without Changing Its Model

  Qwen-MM-Plugins ships vision into rival harnesses as installable skill-plus-MCP pairs rather than as a model upgrade, but everything past local file reading routes…

• Cloudflare's Kitesurf Loses To Chromium On Speed. Read The Memory Column Instead.

  Kitesurf's own benchmark table shows it is slower than Chromium on wall time and three to seven times cheaper on CPU and memory, which is an argument about which number…

• Briefing · August 10, 2026 · morning

  Agents stopped borrowing human software this week, with a human-shaped agent browser switched off the same week a browser written for agents shipped, and coding agents…

• Briefing · August 5, 2026 · afternoon

  In four days the industry issued agents the full kit of a human employee (a computer, a wallet, an identity, an operating system) and every control shipped alongside…

• DeepSeek-Reasonix Is a Coding Agent Built Around One Number: the 50x Gap Between a Cache Hit and a Cache Miss

  Reasonix's transferable idea is that an agent's input bill is set by prefix stability rather than model price, so an append-only loop that never rewrites history is…

• Briefing · August 2, 2026 · afternoon

  Agent skills finished their transition from a convenience feature into a package ecosystem, complete with a measured supply chain, an OWASP top ten, and enterprise…

• The Azure DevOps MCP Server Ships a Prompt-Injection Guardrail. One Tool Doesn't Use It.

  Microsoft built the prompt-injection defense for its Azure DevOps MCP server and applied it to wiki and build-log tools but not to the one returning pull request…

• Briefing · August 1, 2026 · afternoon

  Agent state that used to live somewhere invisible is being dragged into the open, by the MCP spec that deleted the hidden session, by YC scoping memory and permissions…

• OpenConnector Hands Your Agent 8,310 SaaS Actions. Credential Encryption Is Off by Default.

  OpenConnector's value is the credential boundary rather than the provider count, and that boundary ships unlocked because encryption, the admin token, and the action…

• Briefing · July 31, 2026 · morning

  Four separate disclosures and shipments in seventy-two hours all turned on the same question, what an agent can reach on the network and whether anyone checked that…

• Briefing · July 30, 2026 · afternoon

  Three unrelated shipments on the same day attacked the price of a token from opposite ends, vendor price cuts, enterprise spend guardrails, and a local runtime that…

• Briefing · July 30, 2026 · morning

  Three shipments in 48 hours moved capability out of the model and into the harness around it, and the same 48 hours priced the harness as the new attack surface.

• Briefing · July 29, 2026 · afternoon

  Nothing shipped today was a new model, and almost everything shipped was about what goes into one, which is exactly the capability the industry spent the same 48 hours…

• MCP 2026-07-28 Goes Stateless: The Session Didn't Disappear, It Moved Into Your Model's Context

  MCP's stateless rework deletes the session from the transport and rebuilds it as an explicit handle the model threads through tool arguments, which is a real…

• Briefing · July 28, 2026 · afternoon

  Agent capability now ships in two competing packages, and on the day MCP finalized a governed spec with deprecation policy and OAuth hardening, the trending board…

• Briefing · July 28, 2026 · morning

  The release unit stopped being the model and became the runtime around it, with Moonshot shipping its training cluster alongside its weights on the same day MCP…

• Briefing · July 27, 2026 · morning

  Three institutions at three different layers, a protocol, a platform and a regulator, all shipped agent governance machinery inside the same ten days, while the…

• Briefing · July 26, 2026 · afternoon

  Two days before MCP ships the revision that makes agent tooling horizontally scalable, every fresh security finding says the same thing, which is that nothing above the…

• OpenWorker Is Local-First. Three Things About It Are Not.

  OpenWorker's local-first design is a claim about where your data sits, not about who can start the agent, and its Slack trigger, its scheduler, and its cloud OAuth…

• MCP Apps Let a Tool Server Draw the Interface You Click

  MCP Apps makes the server asking for permission the same party that renders the interface you grant it in, and half the safeguards in its security model are phrased as…

• Caveman Got to 85,000 Stars Shrinking What Your Agent Says. Now It Rewrites What Your Agent Reads.

  Caveman's own SKILL.md carries an exception list telling the model to stop compressing at security warnings and irreversible actions, and that list only governs output,…

• Briefing · July 25, 2026 · afternoon

  The agent harness is separating from the model vendor, with OpenWorker, the stateless MCP specification, and OpenAI's own Codex plugin for Claude Code all landing in the…

• WorldMonitor Runs Its AI on Your Machine First and Treats the Cloud as Backup. That's the Part Worth Stealing.

  WorldMonitor's 54k-star situational-awareness dashboard matters less as an intelligence product than as a shipped template for local-first AI that runs on Ollama with no…

• Briefing · July 23, 2026 · morning

  The same week vendors raced to ship enterprise agent-deployment platforms, the plumbing beneath them (MCP) was rebuilt for stateless scale and hardened auth, and a wave…

• MCP Just Got Write Access to Houdini, Unreal, and Your VFX Pipeline

  MCP just moved from read-only lookups to write access inside production creative apps (edit keyframes, build node trees, render frames), which flips the risk model from…

• Briefing · July 22, 2026 · morning

  MCP became load-bearing infrastructure: the protocol went stateless (RC, final July 28) while MCP servers landed in the pro creative stack, an enterprise asset graph,…

• MCP Enterprise-Managed Authorization, the Claude Apps Gateway, and ARD All Stop at the Same Line

  Every agent governance layer that shipped or stabilized this month authorizes connections and not actions, and each spec says so in its own security section (EMA stable…

• Briefing · July 20, 2026 · afternoon

  A control plane arrived (MCP Enterprise-Managed Authorization stable, AWS Claude apps gateway, Google tool-discovery spec, Anthropic CISO playbook) that decides which…

• Briefing · July 20, 2026 · morning

  The industry agreed agents should never touch source material directly, only curated projections (credential broker, knowledge compiler, code-graph layers), and…

• Wigolo Gives Your AI Agent the Whole Web for $0 and No API Keys. The Catch Is What Comes Back.

  Wigolo's real value is collapsing all web access into one local MCP surface with a $0 per-query meter and nothing leaving ~/.wigolo/, but "free and keyless" also deletes…

• Briefing · July 17, 2026 · morning

  The interesting layer moved from the model to the permission boundary around it: 1Password credentials Claude never sees, MCP auth moving onto OAuth and OpenID Connect,…