Askaboard is a free canvas tool that lets you connect Claude, ChatGPT or Cursor over MCP using your existing subscription, so your agent can draw, write and make shapes on the board. The agent sees what you write, checks your work and explains concepts until they click.
Automattic, the owner of WordPress.com, launched Spacefast, a service that provides infrastructure such as databases, authentication, file uploads, emails, and analytics for vibe-coded websites and apps. Users can connect Spacefast with agents and chatbots including ChatGPT, Claude, and Cursor, or link a Git repository, and the product competes with Lovable and Emergent while offering more openness. The product is headed by Batuhan Icoz, was soft-launched in September, and comes as Automattic navigates recent leadership turmoil and layoffs.
Zurich-based 0sec Labs has released 0, an MIT OR Apache-2.0 licensed AI security harness that runs vulnerability investigations, code review, pentesting, reverse engineering and fix generation, driven from a local browser console, headless CLI or MCP server. It is a bring-your-own-LLM control plane supporting 14 listed providers, runs on Apple Silicon macOS, x64/ARM64 Linux or a container without a GPU, and reports self-reported scores including 93/95 on XBOW web CTFs and 81/104 on the black-box XBOW union. The research page lists 30+ merged Linux kernel fixes, and a hosted version, 0cloud, is on a waitlist.
OKF (Open Knowledge Format) is an MIT-licensed open spec, based on the Google Cloud Markdown spec, that represents knowledge as a directory of markdown files with YAML frontmatter and an index.md entry point. It makes three guarantees: one index as the single source of structure, typed frontmatter (concept, howto, reference, decision, metric) so agents route without heuristics, and git-native history with semver. Conformance is three rules, checkable via a shell one-liner or the OKF skill's validate.sh, with a zero-backend browser validator described as coming soon.
Task Router offers 268 measured tasks that can be called by task alias (e.g. taskrouter/<task-id>), routing each request to the model that fits a chosen priority—cheapest, balanced or most accurate—among those clearing the task's quality floor. Users can describe their own task to find matching tasks and evidence or request a benchmark, and each task shows what to send and what is returned. The methodology freezes a dataset, defines a task-specific rubric, runs qualified candidates from all four tiers on the holdout with an LLM judge, and joins measured token profiles with published pricing.
APC Playground is a browser-based lab for writing policy expressions in a restricted grammar (policy.apc) that evaluate API tool calls, with a local runtime and no network requests. It shows evaluation results, checks, and an exportable evidence record, and notes that the evidence digest is a content-integrity checksum rather than a signature or attestation, and that the lab does not establish production enforcement.
Vibe-Shield is a zero-dependency, offline static security scanner published as @vibefoundry/vibe-shield, aimed at vulnerabilities common in agent-written code such as unauthenticated mutation routes, SQL injection, IDOR, exposed service-role keys and missing Row Level Security. It ships 91 signatures across eight categories (79 code rules plus 12 agent-integrity rules via audit-skills), and can generate an agent-ready fix prompt, SARIF/GitHub output for CI gating, and an Agent Skill plus MCP server via `init`. The README states the scanner is read-only by default, that grades apply only to the rules and files examined and are not a security certification, and that the npm commands may lag the v2.0.0 source tree until a release is published.
This guest post by TurboDocx CEO Nicolas Fry walks through an n8n workflow that reads contracts marked "Ready to send" from an Excel table, generates the agreement from a Word template via the TurboDocx node, and routes it to Slack for Approve & send / Reject approval. Approved contracts are sent for e-signature with signature and date fields placed at template anchors, and a TurboDocx Trigger then downloads the executed PDF, uploads it to SharePoint, marks the row Signed and posts to Slack. The post covers setup, template preparation, end-to-end testing, troubleshooting and possible swaps such as CRM triggers or Teams approvals.
RenderPixels lets AI assistants such as Claude, ChatGPT, Muse, GrokBot or Cursor generate pixel-exact images like Open Graph images, favicon sets, logos and banners, returning files ready to use. It offers 50 free renders every month with no card required, and the post states 550+ images rendered so far.
MarQ is a project management panel for people and AI agents that combines tasks, dependencies and requirements in one board. It supports MCP so you can connect your own AI assistants to query and update tasks, statuses and notes using your token and under your control; MarQ does not evaluate or make decisions about people. It also offers tags for filtering, dependency trees, and requirements as a separate entity from tags.
Day AI offers a context graph and agent control plane to upgrade a company's go-to-market stack. Its Customer Memory is an LLM-optimized ontology built from permissioned ingestion of a team's email, calendar, meetings, and Slack, giving one central context graph the customer controls. Its agent control plane gives agents names, job descriptions, and titles within an org chart, with an audit trail showing what ran and requiring approval before anything goes out.
Chatty is an MIT-licensed, self-hostable AI customer support engine positioned as an open-source alternative to Zendesk and Intercom, offering streaming chat, RAG over your own documents, lead capture, meeting booking, and human takeover. It supports seven messaging channels (WhatsApp, Messenger, Instagram, TikTok, Telegram, Twilio SMS, and inbound email), WooCommerce order and inventory sync, a LiveKit voice agent, and an 81-tool FastMCP server for agent-driven dashboard control. Deployment uses Docker Compose with managed Supabase for Auth, Postgres, Storage, and Realtime, and supports bring-your-own-key LLM providers including Gemini, OpenAI, Claude, and OpenRouter.
PuglieseWeb founder Emanuele Pugliese argues that AI now handles most production work—drafting scenarios, docs and pull requests—so deep end-to-end understanding of the product has become the entry requirement rather than a senior specialism. He defines Architecture as Truth (AAT), a practice in which versioned architecture documents (decisions, contracts, behaviours and plan) are the single source of truth that people decide through and AI agents build from, held up by five principles and four rules for agents. He illustrates it with a 30–31 October reminder feature built by an agent, where the owner caught an unspecified phone number in the reminder text, and notes SystemDox, his tool for serving the same documents to people and agents over MCP, is in private preview.
Infinix is an abandoned open-source local autonomous AI agent for Windows and Linux, built by Moonyeep with Manus AI on the ZeroScript architecture, that is controlled through supported browser-based AI chats and provides endpoint diagnostics, workspace tools, browser automation, shell access and multi-agent delegation without a separate model API key. It supports eight providers (DeepSeek recommended, plus ChatGPT, Gemini, Kimi, GLM, Qwen, Arena and Meta AI) and an optional Roblox Studio MCP integration, and is released under GPL-3.0 with the requirement that derivative works stay free and open-source. The creator is seeking developers to fork and improve the working but unfinished codebase.
MailDignity is an API and MCP tool that checks LLM-generated cold emails before sending, flagging issues like generic flattery, fake familiarity, unsolicited diagnoses and asymmetric asks. It returns PASS, REVIEW (with a repaired_body) or FAIL verdicts, and works with Gmail, Outlook, ChatGPT, Claude, Cursor and no-code stacks. Pricing starts at $19/mo for 2,000 checks with a 7-day free trial.
APM is a dependency manager for AI agents that lets projects declare skills, prompts, instructions, plugins, and MCP servers in one apm.yml, then run apm install to deploy each primitive to supported harnesses including GitHub Copilot, Claude Code, Cursor, Codex, Gemini, Windsurf, and Kiro. It uses a lockfile to pin exact versions and content hashes, scans installs for hidden Unicode, and enforces apm-policy.yml at install time including transitive MCP servers. APM is open source under the microsoft org, MIT-licensed, and built on AGENTS.md, Agent Skills, and MCP.
A walkthrough using XRef 0.4.0 on a synthetic stripped C/assembly program shows how serialized field names can be traced to offsets and candidate writer functions, but that 2,000 uncalled decoy functions write the same offsets and earn the same 40-point write score as the real function, which only ranks first via a 10-point call-graph bonus from sharing main as a caller. The article stresses checking every conclusion against machine instructions and call sites, distinguishing addresses from loaded values, and treating an access range as not a struct declaration. It also notes that a historical XRef reproducer produced pseudo-C returning 99 where the machine code returns 4, and that empty or truncated results must report coverage limits rather than be read as proof.
Ballast is a cold email platform that charges per email sent rather than per mailbox or seat, with unlimited mailboxes, seats, warmup outside the quota, a Unibox, and API/webhooks/MCP access included on all five plans starting at $19/month for 20,000 emails. It paces sending per mailbox with random 4–10 minute gaps, routes SMTP mailboxes over static mail-only IPs, runs nightly SPF/DKIM/DMARC checks, and pauses mailboxes, campaigns or workspaces when bounces exceed a threshold. Every app action is also an MCP tool for Claude, ChatGPT and Cursor, with confirming calls required before anything sends, imports or deletes.
GoLand 2026.3 lets AI agents use its built-in profiler through a bundled goland-profiler skill and MCP tools, so an agent can launch the app with the profiler, pick and capture suitable profiles, read the results, and point to the responsible code. The workflow is tested with Claude Code, Codex, and Junie, and captured profiles appear in the profiler session and Recent profiles in the Go Optimization tool window. Limitations include that the profiler cannot attach to an already running process and short-lived programs leave too little time to capture useful data.
Amazon's North America Sort Center team built a serverless Model Context Protocol (MCP) server on Amazon ECS Fargate that acts as a centralized, agent-agnostic gateway between AI agents and the enterprise data lake. Adding a dataset requires only a metadata JSON file, which the pipeline indexes into Amazon Bedrock Knowledge Bases, while Amazon Cognito authentication, SELECT-only Athena tools, Bedrock Guardrails, and CloudWatch logging provide centralized controls. The architecture separates the tool layer from the agent layer so any MCP-compatible client can share the same tools and access controls in a multi-tenant environment.
AWS Quick's team describes a taxonomy of agentic primitives built from four questions—When, What, Who, and How—covering triggers (human-initiated, agent-delegated, scheduled, event-driven), agents as persistent learning actors with instructions, capabilities, and learned context, and capabilities spanning tools, skills, and workflows. The post argues skills and workflows retain value independent of model improvements, with skills able to crystallize into workflows and workflows dissolve back into skills, and illustrates how a single request like a daily Slack digest can be met at different points on a confidence contract.
Mastra agents can now receive Ring doorbell events as notification signals with configurable priorities, letting the agent fetch a snapshot or video clip from the Ring API and decide what to do. Setup requires a Ring developer app, the @mastra/ring-signals package (0.1.0) and @mastra/core 1.81.0 or later, and RingSignals can target an existing channel thread such as iMessage or be followed via the client SDK's subscribeToThread().
Claude Code v2.1.319 changes auto mode so calls the server can't check are asked about or denied when telemetry or feature flags are off, adds MCP task backgrounding in the terminal with a CLAUDE_CODE_DISABLE_MCP_TASK_BACKGROUND opt-out, and introduces a permissions.denyInsteadOfPrompting setting. It also adds /claude-api latency-optimize, spend breakdowns in /usage, several Claude apps gateway admin settings, and a long list of fixes spanning MCP, /diff, permissions, sandboxing, self-hosted runners, VSCode and cloud sessions.
Greenlight Financial's Luna, built on Amazon Bedrock AgentCore runtime and memory, autonomously resolves more than 90 percent of its 3,000–4,000 monthly security and risk cases, using a tiered supervisor architecture with over 30 specialized agents and episodic memory for continuous learning. The system triages dark web breach-card alerts, identity anomalies, and financial-risk events in seconds, escalating complex cases to a Tier 2 supervisor and human analysts. Greenlight later extended Luna into financial risk triage within two months by adding new specialized agents and a risk-domain supervisor to the existing infrastructure.
This AWS post describes using Okta Cross App Access (XAA) as the governance plane and Amazon Bedrock AgentCore Identity as the execution plane so an AI agent can act on behalf of signed-in users, with Okta deciding which agent may act for which user and AgentCore redeeming Okta's single-use ID-JAG for a short-lived access token. It walks through registering the agent in Okta, configuring the credential provider and workload identity, enforcing per-user authority via the groups claim in MCP servers, and reports measured results such as revocation taking effect in about 1 second and AgentCore Identity adding about 0.6 seconds to a roughly 30-second request.
Part 2 of this AWS post moves the Part 1 Okta Cross App Access solution from one agent and two MCP servers to a topology with Amazon Bedrock AgentCore Gateway as a single front door that redeems Okta's ID-JAG for each target, default-deny Cedar policies in AgentCore Policy binding tools to agents and delegated scopes, and a second agent on Amazon EKS under its own Okta identity. It also describes tracing decisions with AgentCore Observability and CloudWatch Omni alongside Okta's System Log, reports validation results and latency figures, and compares XAA with per-user OAuth consent for applications that cannot accept an ID-JAG.
Stripe's MCP server lets AI agents build checkout pages, run financial reports, automate refunds or price adjustments, and now send money to others via Stripe Treasury. Agents can connect on your behalf via OAuth with human confirmation required for sensitive live-mode actions, or get their own identity through agent-tagged API keys governed by Approval rules that require designated reviewers for sensitive actions. Approval requests can be reviewed in the Dashboard, expire after 14 days if unapproved, and agents can listen for outcomes via webhook events such as v2.core.approval_request.approved.
EasyRunCraft is a browser-based suite of 13 office and creative editors, including WordCraft, GridCraft, DeckCraft, PdfCraft, PhotoCraft, FilmCraft and CADCraft, built on ArtCraft's open-source Crafting Apps. Manual editing is free without an account, while a built-in AI agent or an external agent connected via MCP can edit files, with MCP operations costing 1 credit each.
Agentic Identity Broker manages delegation chains for on-behalf-of flows in agentic AI, bridges distinct OAuth2 infrastructures, and provides a secure token vault, deployed in the call path via gateways like Agentgateway. It handles OAuth2 ceremonies, token vaulting and token translation centrally so MCP server developers only need to provide tools, and it offers consent management, audit logging, and an impersonation feature for delegation chains without user presence. The project is in active development and used internally in production for several MCP servers.
Current is an Elixir runtime in which AI agents cannot act directly: they submit typed proposals that are validated, reviewed, approved, and only then applied by a separate trusted interpreter. Every step, from the request and the files the model read to approvals and effect outputs, is recorded in a hash-chained, event-sourced log that can be replayed to rebuild state. It is early-stage, single-node, and explicitly not a sandbox or authentication system.
Ai2 introduces FoundationWorlds, a framework pairing controlled simulated environments with tools for automatically generating tasks, demonstrations, and behavioral metrics, starting with ToyBlocks, an open simulation of a robot arm manipulating blocks on a tabletop. ToyBlocks generates demonstrations via reinforcement learning, motion planning, and a task-and-motion planner at up to 24 times real-time on a single GPU, and supports studies of data scaling, spatial generalization, long-horizon planning, world models, and sim-to-real transfer. The initial release includes 85,336 long-horizon demonstrations covering nearly 1,600 hours and 144 million frames, plus two trained models, training code, and evaluation code and validation sets.
Amazon is launching a feature that lets select U.S. customers chat with its Alexa AI agent over text messages to search for items, add them to cart, and purchase on Amazon, following its September block on Meta's Muse querying its site. The text agent builds on recent Alexa shopping upgrades and can manage lists, track prices, search across the web, compare products, check order status, and search via shared photos. Customers without an invite can join a waitlist, with broader rollout in the coming weeks.
GRID is a free beta no-limit hold'em arena where LLMs compete by connecting through an MCP client such as Claude Code or Codex, receiving game state and returning actions via tool calls. Players write a strategy of up to 6,000 characters in the game, can edit it at any time with changes applying from the next action, and can ask their AI to revise it based on opponents' strategies observed in match history. The team notes MCP can be finicky, especially after a browser refresh, that tool calls consume many tokens with a more efficient connection type planned, and that a built-in local model plays basic hold'em but struggles to follow written strategies.
exxperts is a free, open-source desktop app from Exxeta that drafts what a conversation is worth remembering and shows you the draft to edit, save or discard before it is stored, keeping each project's memory as a plain Markdown file on your computer. It works with your existing ChatGPT, Claude or GitHub Copilot plan, an API key or a company gateway, and sends conversations and room memory only to the AI provider you choose. On the public LongMemEval-S test, a room answered 47 of 50 questions from its memory using under a quarter of the tokens per question, versus 41 for the same model reading the whole history.
Markeplay is a no-code e-commerce platform for building and growing B2B, B2C and marketplace projects, now enhanced with AI to automate processes, generate content and pages, and assist customers through the purchase journey. It offers a set of specialized AI agents—Configure, Design, Code, Reach, Search, Bridge, Catalog, Translate, Care and Insight—covering product configuration, frontend creation, Vibe Coding page generation, Meta Ads campaigns, catalog optimization, translation and chat support. Through Agentic Commerce and AI Bridge, the platform makes catalogs accessible to AI assistants such as ChatGPT, Claude and Gemini so they can discover products and buy on customers' behalf.
Scale AI's open source AgentEnv Framework, which builds reproducible environments with realistic apps, data and multi-step tasks for testing agents, now supports Pydantic AI as an agent that runs in process with the Coder capability from Pydantic AI Harness. The post explains configuration via an OpenAI-compatible endpoint, a mail-mcp example bundle with a task that deploys the environment, prompts the agent and runs a verifier, and notes that swapping a2a_agent_id to claude-code lets you compare agents on the same task.
Alexander Panasenko describes KYB (Know Your Business), his open-source Git-backed store that keeps versioned records with lifecycle states (active, archived, retracted) so coding agents across Claude Code, Codex and Antigravity can query current state, history or a time slice separately instead of trusting stale Markdown notes. Pinned to KYB v0.3.3 (commit 06f63b5, October 27, 2026), the piece covers write-time versus event-time limits, deadline reminders, and a small qualitative survey of five internal agents, with no controlled benchmarks.
Mantis is an MCP server that lets AI agents browse the web as short, numbered text instead of screenshots, and works with Claude Code, Codex, Cursor or custom agents. In the author's benchmarks against Playwright MCP's accessibility tree, long tasks used 29-47% fewer input tokens, 29-37% fewer calls and about a third less time, while short tasks used 35-57% fewer input tokens with equal or better accuracy. Limitations include no canvas input, login and bot walls requiring ask_human with a display, and benchmarking only on read, navigate and form-fill tasks with two models.
Eremoterra lets you pick any parcel of Earth, hand a prompt to an AI agent such as ChatGPT, Claude or Cursor, and have it describe and build on that patch as if no one had ever lived there. Trying a patch is free for a night; keeping it costs USD 1, a price that rises about 0.7% each time another 0.1% of the planet's 233,280,000 parcels is claimed and doubles every 10%. Patches carry a server-rendered chronicle of events, can be shared by link without an account, and can be populated by a people you define.
Amazon announced the general availability of Web Answer on Amazon Bedrock AgentCore, a managed Gateway tool that takes a natural-language question and returns a synthesized answer with source citations in seconds, replacing a self-built search, retrieve, synthesize, and citation pipeline. The post contrasts it with Web Search (which returns ranked URLs and lets you keep your own model), then walks through granting the Gateway service role bedrock-agentcore:InvokeWebAnswer, creating a Web Answer target, and calling it from a Strands agent. It is available in us-east-1 at $10 per 1,000 tool calls, with a 10 transactions per second per account rate limit.