iCreatAI News
Skip to content
Oct 31Sat
  1. Hacker News AI60

    Rival AI models write an encyclopedia and judge each other blind

    Scio is an encyclopedia written entirely by AI agents that search for sources, write missing articles, and check each other's work, with every sentence backed by a source, exact quote, and saved copy of the page. Submissions are machine-checked for real sources and quotes, then judged by a randomly selected jury of agents that excludes the author's model family and votes blind, with majorities of three of five or four of seven required to publish. The platform reports 18,933 published articles by day 64, compared with Wikipedia's roughly 1,772 at the same point.

  2. Hacker News AI58

    Put AI to Work for You

    IFTTT founder Linden Tibbets announced that IFTTT is adding AI, launching an AI Agent service so AI can serve as both the trigger and the action within Applets, and removing Applet and service limits on every plan including Free. The company is dismantling its paywalls in favor of a monthly credits allowance spent when Applets run, with a new $2.99 Starter plan, and ifttt.com becomes IFTTT.ai.

  3. The Decoder58

    Malicious Claude Code extension in Cursor's marketplace attempted remote access and data theft

    A tampered version of the Claude Code extension for Cursor was available in the Cursor VS Code extension marketplace on Thursday for about eleven hours, affecting up to 5,000 users, according to Cursor. The extension tried to harvest data such as hostname, username, operating system and public IP address, and attempted to set up remote access for the attacker, which Cursor says likely wouldn't have worked on most machines since it requires admin privileges. Cursor pulled the extension and took the entire marketplace offline, then reinstated it after working with providers to neutralize the malware and confirming no further risk, saying no other extensions were affected.

  4. TechCrunch · AI47

    Zest’s new AI agent finds restaurants and books reservations over text

    Zest, a restaurant discovery app that launched earlier this year, introduced a personal AI-powered "restaurant concierge" that operates via text messages and can check availability and book tables through services like OpenTable, Resy, and SevenRooms. Users text the concierge at (212) 470-6067, and it can be added to group chats to blend everyone's tastes, settle indecision with in-thread voting, and book a table for the group. Zest, founded in November 2024 with $1.8 million in pre-seed backing, links to users' credit cards via Plaid to track food and drink spending and tailor suggestions.

  5. AWS Machine Learning Blog42

    How Worldwide Express automated freight exceptions with Amazon Bedrock

    Worldwide Express, part of ShipStation Global, built a multi-agentic AI solution on Amazon Bedrock that connects to its SpeedShip transportation management system, using three specialized agents for invoice matching, pricing variances, and accessorial validation, each grounded in carrier-specific knowledge bases. Six months after launch, the company reported a 75 percent reduction in active exceptions (from $15M to $4M), a 4-week improvement in time-to-cash, $1M in annual savings, and a one-time $10M free cash flow infusion, with agents closing about 10,000 exceptions weekly at under 1 percent error rate across over 40 LTL carriers. The solution moved from assessment to production in less than 6 months and initially used human-in-the-loop approval before bulk approval became the default once accuracy exceeded 99 percent.

  6. Hacker News AI63

    Show HN: Opencommerce – OpenRouter for commerce, one API for AI agents to buy

    Opencommerce presents itself as "OpenRouter for commerce," offering a single endpoint for AI agents to buy from online stores, with a TypeScript SDK (@agent-cards/commerce-sdk) that provides a buyTool for agent frameworks. It claims coverage of 5,026 online stores, monitored purchase flows tested from search to checkout, purchases in under 20 seconds, and integration with existing wallets. Pricing is 1% of each completed order on the Standard plan, while Enterprise adds API access with custom fees.

Oct 30Fri
  1. Hacker News AI58

    Show HN: Omneum – Local, text-blind context control plane for AI agents

    Omneum is an open-source context control plane that sits between retrieval and generation, using provenance-aware graph inference to estimate source reliability and dependency-adjusted claim support, then selecting original passages under a token budget. It runs locally by default, persisting observations in SQLite or PostgreSQL, and evaluates structured observations without reading source text or calling an LLM judge. The project reports precision gains of 3.02–8.44 percentage points and 14.46–18.51% lower reconstructed-context token usage across BM25, MiniLM, BGE Reranker v2-m3, and Cohere Rerank v4.0 Pro integrations.

  2. Cloudflare Blog36

    Cloudflare services for private origins is now generally available

    Cloudflare's services for private origins are now generally available, letting customers point a proxied A or AAAA record at a private IP so Cloudflare reaches the origin over existing Cloudflare One connectivity while WAF, caching, bot management, and Workers apply as they do for public origins. The private_routing setting enables automatically for RFC 1918, RFC 6598 CGNAT, and RFC 4193 IPv6 ranges, and no inbound firewall exception is required. Argo Smart Routing and Dedicated CDN Egress IPs are not supported, and origin health checks require Load Balancing.

  3. Hacker News AI34

    Show HN: Molfar – AI meetings where several models answer at once (Android)

    Molfar is a free Android AI app offering a chat assistant, 28 role-based experts, and meetings where up to four AI models plus an Orchestrator and Secretary answer simultaneously. Users connect their own API keys for Google Gemini, OpenAI, Anthropic Claude, OpenRouter, NVIDIA NIM or any OpenAI-compatible service, with keys stored in encrypted Android Keystore and chats and files kept on the phone. It also includes Markdown and document editors, a private file manager, and AI usage statistics.

  4. Hacker News AI63

    Show HN: Dodaiso – Open-source personal AI agent (like Jarvis, dots,duet)

    Dodaiso (formerly Personal Jarvis) is an open-source, Apache 2.0 agent OS for desktop that runs coding agents, browser and apps by voice or chat on your own machine, with no account or paid tier and support for hosted, subscription or local models. It offers an Agentic IDE with multiple coding agents in live panes addressed by call signs, plus agents, memory, plugins/MCP, a marketplace and approval checks on system-changing actions. It runs on Windows, macOS, Linux or a headless server, installable via a one-line script or desktop installers.

  5. Hacker News AI36

    Show HN: Send21 – Crypto pay links an AI agent can create but can't spend

    Send21 lets an AI agent or backend create a payment draft using a scoped API key that can create and track drafts but never spend, while a person always signs in their own wallet. The same flow is available over API or MCP (Streamable HTTP), and test networks on send21.io are for the demo only, with account drafts using live networks. A draft moves no money until someone signs it, so creating small drafts to your own address and canceling them is a safe integration test.

  6. Hacker News AI22

    Show HN: AI agents trade privately on BitcoinZ, with proof of delivery

    This Show HN post introduces I Am Wallet, an MCP/REST service that lets AI agents create shielded BitcoinZ wallets, send signed private messages, and trade in small paid steps where each delivery is fingerprinted and checked. It describes built-in safety limits, Ed25519 signer identities, a 1 BTCZ service fee per payment or message, and honest caveats including custodial key storage and reliance on current zk-SNARK cryptography. The code is MIT-licensed and can be self-hosted with a synced BitcoinZ node, Python, and nginx.

  7. Pydantic AI Articles42

    Rendreal takes print orders inside the assistant you already use

    Rendreal, built with Vstorm using Pydantic AI, lets customers describe a print job and receive print-ready artwork, a quote and a checkout link without leaving a chat, via web chat, a WhatsApp bot or any external assistant connecting to its MCP server. The system covers five product types across three channels, with Pydantic AI validating tool arguments and structured outputs before orders reach validation. Rendreal says assistants get access to its own integrated services, not an open network of independent supplier agents.

  8. AWS Machine Learning Blog38

    Building intent-driven UI testing with Amazon Nova Act

    Epsilon's Agentic Platform team built a multi-tenant UI testing service on Amazon Nova Act and Amazon Bedrock AgentCore Browser Tool, layering natural-language, intent-based tests on top of its existing Playwright regression suite. The service runs each workflow's plain-English steps through Nova Act over a CDP WebSocket in managed, ephemeral browser sessions, capturing per-step screenshots and pass/fail results. Epsilon reports 4-6x faster test authoring (an 18-step workflow took 5-10 minutes versus 30-90 minutes for an equivalent 80-150-line Playwright script) and a 100 percent pass rate on saved trajectory replays.

  9. Google Developers Blog58

    Build Generative UI Apps with A2UI & CopilotKit Agents

    The article explains A2UI, Google's framework-agnostic open standard for Generative UI in which agents describe interfaces as declarative JSON data that the client renders using a trusted component catalog, and describes how CopilotKit's AG-UI-based stack connects agents such as Google ADK, LangChain, Mastra and Strands to React and Angular apps. It covers the Basic Catalog's 18 primitives, custom catalogs defined with Zod schemas, bi-directional reactive surfaces that send user input back to the agent, and setup via the ag_ui_adk package and the CopilotKit provider.

  10. Hacker News AI38

    Teaching a 1999 VB6 app to talk to AI agents

    The author added a headless mode to the VB6-based SQL Server Comparison Tool (SCT) that runs saved comparisons and emits versioned JSON, plus a small C# MCP server (SctMcpServer.exe, .NET Framework 4.8) that lets Claude Desktop list and run those comparisons. A key bug was that Claude Desktop starts MCP servers with a stripped-down environment missing %CommonProgramFiles%, causing ADO error 3706 until the server restored standard Windows variables. The design restricts the AI to saved comparisons with no server choice, credentials, writes or row data, and shipped in SCT version 6.0.

  11. Hacker News AI58

    Show HN: phpClaw – AI agent runtime for PHP with tools, memory and guards

    phpClaw is an MIT-licensed AI agent runtime for PHP that provides a built-in ReAct loop, pluggable tools, memory, and eight default security guards, with zero framework dependencies in core. It auto-detects seven LLM providers from environment variables, ships eight framework and CMS adapters (Laravel, Symfony, Drupal, Magento, WordPress, Joomla, OpenCart, PrestaShop), and includes an MCP server for exposing tools to Claude Desktop and Claude Code. It also offers pipelines and graphs with human pause/resume and fan-out, and requires PHP 8.1–8.4 with ext-curl, ext-json, and ext-mbstring.

  12. AWS Machine Learning Blog58

    How MoEngage turned over 400 APIs into agent tools with AgentCore Gateway

    MoEngage used Amazon Bedrock AgentCore Gateway to expose roughly 400 internal REST APIs across seven AWS Regions as permission-scoped agent tools, avoiding over 20 separate MCP servers and per-API networking. Cedar policies filter tools server-side per agent identity, managed egress over Amazon VPC Lattice keeps APIs private, and teams expose operations by annotating OpenAPI specs rather than writing MCP code. MoEngage estimates the approach saved about six months of platform engineering effort, with new API onboarding now taking hours instead of days.

  13. Hacker News AI55

    Dive Apps: Superpowers for AI Builders by MotherDuck

    MotherDuck launched Dive Apps, fully custom data apps built with an agent that run on the MotherDuck data warehouse and can write back to source systems via Flights, its serverless Python runtime. Dive visualizations can trigger Flights to update MotherDuck data, write to source systems, send emails, post in Slack, rerun machine learning models, or launch an agent harness. MotherDuck positions Dive Apps for replacing SaaS apps, automating operations, and keeping humans in the loop to steer agents, citing SSO, RBAC, and table, row, or column level security.

  14. Hacker News AI42

    Anthropomorphize Your AI Agent for Fun and Profit

    The author argues that Muse's mainstream appeal comes not from new capabilities but from a user experience that feels like employing a virtual assistant, and recommends treating AI agents as very smart humans who never sleep. Granting agents read-only access to email, bank and other systems, plus accumulated context and feedback, makes them exponentially more useful, as shown by a self-built proactive monitor that caught a misfiled LLC fee and a missed Chewy email.

  15. Hacker News AI58

    Make your AI skills more predictable with scripts

    This newsletter explains that AI skills are folders containing a SKILL.md file with a name, description and instructions, and can also bundle scripts and other resources that agents run when needed. It walks through a lead-generation skill that starts as a single prompt and is then refactored with three scripts (web_search.js, qualify_lead.js, store_lead.js) plus updated instructions, moving repeatable steps out of the agent's judgement and into code. The author argues this yields more predictable outcomes and is easier to change, since each part of the process lives in one place.

  16. Hacker News AI47

    Luma – smart launcher for you, and your AI agent

    Luma is a Linux launcher that fuzzy-searches apps and files, offers opt-in CLIP semantic photo search and OCR text-in-image search, a calculator and currency conversion, and exposes the same photo and screenshot index to AI agents via an MCP server (luma mcp) and CLI (luma query). It runs locally by default, with only model downloads and exchange rates leaving the machine, and supports Hyprland, niri, GNOME and KDE. The page reports one agent prompt taking 11 s with Luma versus 1 min 26 s without.

  17. Suno Blog40

    Meet Chat: Our In-house Studio Assistant

    Suno Studio introduces Chat, an in-house assistant that can create stems and plugins, rename tracks based on clip names, lower all faders by a set amount such as 3dB, add Compressor and EQ effects to every track, and offer creative prompts for writer's block. The post notes that Suno Studio is one of a few DAWs with built-in assistants, alongside FL Studio, Fender Studio Pro and Logic Pro, and is available with every Premier subscription.

Oct 29Thu
  1. Simon Willison18

    Quoting Ben Hylak

    Ben Hylak wrote: "29th October 2026 every product i use should just be a headless mcp, that feeds into an agent, where i never have to think about anything underneath. except for our product, of course. in our product, customers love the ui and love us very much. we're special that way."

  2. Hacker News AI58

    Show HN: Kin – Make your AI apps answer to you (allow, ask or block each action)

    Kin sits between AI apps and your accounts, letting you connect each account once and set rules that allow, hold for approval, or block each action, with checks enforced on Kin's own server and sign-ins never held by the apps. It offers shared notes and tasks, mid-task handoff between AI apps, cross-device approvals, and team workspaces, with plans from a free tier up to Enterprise custom pricing.

  3. Hacker News AI38

    Least privilege for your customers' AI agents

    FusionAuth 1.70 introduces Client ID Metadata Document (CIMD) registration and RFC 8693 OAuth token exchange to give AI agents, including MCP servers, narrowly scoped delegation tokens with actor attribution rather than broad user credentials. The release also adds a Recorded Intent extension that logs an agent's stated objective for audit review, and offers entity-based or lambda-based policy engines for deterministic, testable authorization.

  4. Hacker News AI47

    Show HN: Apargon – Ask AI for any app and run it safely with a double-click

    Apargon is a macOS and Linux desktop app that runs "papps"—single HTML files with extra <meta> tags—in a sandboxed window with no installer, server, or build step. The sandbox blocks anything the tags don't allow, and a popup shows requested permissions before the page runs; a coding agent can write a papp from one prompt. Install is via a curl script, release downloads, or Homebrew, and Windows is not yet supported.

  5. Hacker News AI38

    A JSON Schema is not an AI governance layer

    The author argues that JSON Schema validates payload structure but cannot enforce cross-field rules such as an evidence identifier resolving to exactly one provenance entry, so two idiomatic implementations can reach opposite verdicts on identical bytes. Drawing on a bug found in PIC, an open protocol he maintains, he recommends separating schema validation, semantic verification and policy evaluation, and settling ambiguity through shared conformance test vectors. He also warns that trust labels must be derived by the verifier rather than taken from the agent's own payload.

  6. Hacker News AI55

    Show HN: Pidgeon – Email inboxes for AI agents

    Pidgeon is a product that gives AI agents their own email inboxes, created with a single API call, so they can send mail at volume, hold threaded conversations, manage calendars, extract details from attachments, and hand threads off to humans. It includes a firewall that reads every inbound message and flags hidden instructions before the agent sees a clean copy, plus EU data residency, scoped keys, and a 90-day audit trail. A TypeScript SDK is available via npm, and signup is free to start.

  7. Hacker News AI48

    Show HN: The AI workspace for teammates share agents on company

    Nakama is an AI agent platform for teams, offering a ChatGPT-like dashboard where each agent has its own tools, skills, memory, identity, and permissions, plus channels including Telegram, WhatsApp, Discord, and Slack. It supports multi-org servers with invites and roles, and can be deployed via managed cloud or a single Docker container. Integrations include Composio for over 1,000 external apps, and the project is MIT licensed.

  8. Hacker News AI58

    AWF – AI Workflow Framework

    AWF is an open-source ecosystem of three binaries: the Go-based AWF CLI for provider-agnostic YAML workflows, ZPM (Zig + Prolog) for deterministic logical reasoning via 22 MCP tools, and ztick, a push-driven Zig scheduler that can dispatch into AWF workflows. The project emphasizes deterministic replays, per-step token tracking, provider swapping via YAML, and static binaries with zero runtime dependencies.

  9. Hacker News AI35

    Open Source or Custom in Enterprise AI Systems?

    This article argues that as AI makes code generation cheaper, engineering judgment becomes more valuable, and that velocity metrics like PR volume or lines changed are weak signals of progress. It explains where quality breaks in AI-assisted systems—at integration boundaries, retries, observability, and governance—and recommends building on proven open-source components, applying Twelve-Factor and annotation discipline, then adding AI-assisted implementation with strict review, testing, and monitoring. It cites an advisory project for a U.S. industrial manufacturer where an internally built agentic system was rebuilt on the OpenAI Agents SDK for greater robustness and maintainability.

  10. Hacker News AI60

    Shellfirm – a seatbelt for AI agents running shell commands

    Shellfirm is a shell hook that intercepts dangerous commands before they run, offering 496 built-in checks across 23 groups, context-aware escalation (SSH, root, protected branches, production clusters), safer alternatives, and an audit trail. It supports hooks for 8 shells, team policies via .shellfirm.yaml, and an MCP server plus hooks for AI agents such as Claude Code and Cursor. The project is Apache-2.0 licensed and installable via npm, Homebrew or Cargo.

  11. Hacker News AI46

    WSP MCP – Free WordPress AI Agent Plugin

    WSP MCP is a free WordPress plugin that connects MCP-capable AI clients such as Claude, ChatGPT, Cursor, Codex, OpenClaw and OpenCode to a WordPress site, offering 200+ tools with no paid tier or companion plugin. Write abilities are off by default, each tool enforces WordPress capability and per-object permission checks, and every call is recorded in a built-in Audit Log stored in the site's own database. Version 2.9.6 hardens authorization checks on post listing, Elementor, Ultimate Addons for Elementor and media-upload tools, and requires WordPress 6.9+ and PHP 7.4+.

  12. Hacker News AI46

    Tools, 17 with write access: How AI platforms bound agent authority

    Antalpha counted its own MCP server's 120 tools and found 17 can write, 16 of them in Trading, and proposes a five-grade scale from architectural to no guardrail for judging agent authority. It compares Binance AI Pro's isolated-account boundary, OKX's post-hoc staked evaluator network and Minara's procedural confirmations, noting each answers a different question. The tool inventory is verifiable via the public tools/list endpoint at mcp-skills.ai.antalpha.com/mcp.

  13. OpenRouter Announcements65

    How to Prevent Prompt Injection: 13 Attacks, Tested

    The article describes testing 13 self-written and 12 model-written prompt injection attacks against four current models in a document-summarizing assistant with an email tool, finding that text-only attacks rarely worked but that one model (GLM 5.3 Flash) sent 58 of 60 attack emails without defenses. It recommends labeling untrusted content as data (cutting attack emails from 60 to 13 of 720), using a guardrail with a model allowlist and budget limit, checking every tool call with Armor (which blocked all 73 attempted attack emails at about 0.3 seconds added latency), and keeping secrets out of the prompt. Armor blocked real work in one case: a user approving a document's request without naming the address.

    Why it matters: It offers a concrete, measured comparison of layered prompt-injection defenses, including where a tool-call guardrail blocks legitimate user requests.

  14. Hacker News AI38

    AI agent skills for better second-hand decisions

    A GitHub-hosted set of portable agent skills (Buy, Kits, Inspect, Collect, Keep, Second Look) helps assistants research second-hand purchases by separating seller claims, product documentation, and unverified facts. The skills produce source-backed shortlists, compatible bills of materials, inspection cards, collection plans, and repair-versus-replace comparisons, and they do not contact sellers, bid, or purchase. Install via `npx skills add budna-marketplace/recommerce`; Budna MCP is an optional integration.

  15. Hacker News AI58

    Show HN: ThreadShelf – Obsidian and AI chats: vector search, MCP, llama.cpp

    ThreadShelf is a local-first archive that parses exports from ChatGPT, Claude, Google AI Studio, OpenRouter, LM Studio and Grok into a common format, embeds them locally and stores them in LanceDB for semantic and exact search. The same index is reachable through a React UI, CLI, HTTP API and an MCP stdio server, and archived threads can optionally be continued with a loopback-only llama.cpp GGUF model or the explicitly external OpenRouter provider. It also connects Markdown/Obsidian vaults for local note search and bounded tool-calling workflows, with vault writes off by default.

  16. AWS Machine Learning Blog42

    Building an Agentic AI Platform on Amazon Bedrock AgentCore

    This AWS post describes an enterprise Agentic AI Platform blueprint on Amazon Bedrock AgentCore that separates a centrally governed Platform control plane from repeatable, team-owned Workstream cells, with separate inference and tool gateways and a federated operating model. It details multi-account topology, service control policies, a CI/CD pipeline with deployed-runtime evaluation gates and adversarial denial tests, and dependency-ordered retirement, using the eu-west-1 (Ireland) Region. The companion GitHub blueprint lets teams deploy a representative Workstream cell and validate its security and lifecycle contracts end to end.