mcp

Gateway's new experimental.is_mcp selector identifies MCP requests by protocol header. Cloudflare is clear that its absence proves nothing, which makes this a network inventory signal rather than a census of agent activity.

Aperture is generally available. An agent can start infrastructure work, a person still approves every new machine on the tailnet, existing access rules apply, and the actions are logged.

Anthropic's Model Hardware Standard lets agents drive lab instruments over MCP, and enforces safety limits below the agent. The limits it enforces are the ones the device's owner thought to declare.

A proposed browser API gives AI agents structured access to specific tasks on a website, instead of leaving them to guess at the UI. The risk moves closer to the application's permission model.

Your AI can read instructions that are invisible to you. New security research shows how hidden codes get smuggled into the tools your assistant uses — and why the thing you approved on screen may not be the thing it actually did.

Anthropic donating MCP to the Linux Foundation is good governance — and a signal that the easy days of fast iteration are probably over.

This week, MCP went from developer protocol to mainstream integration layer — and most AI newsletters missed it.

AI agents are generating mobile app traffic that security teams can't see. Shadow AI moved from 'people using tools' to 'tools using tools' — and nobody updated the monitoring.

Bessemer's new report on AI agent security says what practitioners have known for months. Now comes the flood.

Cisco's new MCP security gateway is the enterprise version of what power users already built out of necessity.

The Perplexity CTO says MCP eats 40-50% of your context window. Practitioners already knew this.

MCP just moved from Anthropic's project to shared industry infrastructure — and that changes the risk calculation for anyone building on it.

MCP is six months old and already has a CVSS 9.4 vulnerability. The security industry is scrambling. We've been here before.

AI agents can now write and publish directly to WordPress. Quality control just became the only thing that matters.

Enterprise vendors are turning the Moltbook API leak into a governance story — and the framing tells you where the market is heading.

GitHub's MCP server now lets AI coding agents scan code for secrets through the same protocol they're already using. No extra tooling. No separate workflow.

Proofpoint's new Agent Integrity Framework monitors whether AI agents do what they were actually asked to do. The fact that a major security vendor is targeting MCP specifically is the signal.

MCP adoption is outpacing security controls. OWASP and Microsoft both published governance guidance in February. That's not coincidence—it's alarm bells.

Cloudflare's Code Mode demonstrates that MCP server design isn't about exposing more tools—it's about exposing fewer, smarter ones.

May 30th, 2025 Dear Reader, I’ve been putting Claude Sonnet 4 through its paces this week, and whilst the improved reasoning is impressive, what…

#007 Hello Reader, it's good to see you. The holidays are fast approaching, and hopefully you will be able to plan some down time and a reset. When I…