A security test showed that when a ChatGPT account had two connectors pointing to the same MCP server, the model confirmed an action's one-time code via one connector but redeemed it through the other, without informing the user. The server rejected the mismatched call because the code was cryptographically bound to the first connector's OAuth client, but the switch itself happened silently in every logged attempt.
community.openai.com
· 2026-11-06
Finic has released Kairos, an open-source real-time fraud and risk decisioning system that evaluates sign-ups, logins, orders, payments and payouts, returning an approve, step up, review or block decision along with a risk score and supporting signals. The platform includes an MCP server so AI coding agents like Claude Code, Cursor or Codex can build workflows, propose model variants and tune detection models, alongside traditional machine learning options like logistic regression and gradient-boosted trees, with SDKs for TypeScript and Python plus self-hosting via Docker.
github.com
· 2026-11-03
BBRouter is a new tool that recreates Ben Eater's well-known 8-bit computer build as an interactive 3D breadboard simulation. It also ships an MCP server that lets AI assistants such as Claude connect, open, edit and run a user's breadboard projects directly, after a one-time sign-in and authentication step.
bbrouter.com
· 2026-11-01
PaperPilot is a Rust-based PDF toolkit that runs locally as a CLI, browser WASM app, desktop app, REST API, or MCP server for AI assistants like Claude Desktop and Cursor. Version 0.6 supports merging, splitting, rotating, compressing, OCR, watermarking, signature validation, PII scanning, and Excel conversion, all without uploading files to the cloud or relying on Chromium or C++ runtimes.
github.com
· 2026-10-26
A new open-source project called ADRs4AI offers a template system, VS Code extension, and iOS app for capturing architecture decision records (ADRs) generated during human-AI collaboration sessions. The toolkit includes seed templates, an inbox protocol, task-runner recipes, and an MCP server so AI agents can query the stored decision history, with records versioned directly in Git.
adrs.systems
· 2026-10-25
CATT is an open-source tool that lets developers run scripted or model-driven AI agents against MCP servers, apps, websites, or HTTP APIs to see how an assistant interacts with their service. Version 0.2.1 supports two 'surrogate' emulation targets, Muse and Instinct, sharing a common testing contract covering routing, memory, payments, browser/HTTP tasks, and scheduling. The project is MIT-licensed and explicitly states it is not affiliated with Meta, OpenAI, Anthropic, or any hosted assistant.
github.com
· 2026-10-22
Researchers scanned 217 million HTTP response headers from a 10% sample of Common Crawl's September 2026 crawl and found 7,959 sites including headers addressed to AI agents. Most, 7,271 sites, were pointers directing agents to resources like llms.txt files or MCP servers, while 30 sites contained attempted prompt injections and 139 sites flagged whether they had identified the visitor as a bot.
signalscorps.com
· 2026-10-15
SolidCraft is an open-source parametric 3D CAD application written entirely in Rust, offering sketching, constraints, and a feature timeline so models rebuild automatically when dimensions change. It runs on desktop or in-browser and includes a built-in MCP server that lets AI agents perform modeling operations directly. The project reports 75 of 76 public reference parts matching analytic or FreeCAD-computed geometry checks, with one known bug tracked.
github.com
· 2026-10-13
A new toolkit called REA connects coding agents to analysis tools for native binaries, JavaScript/Electron apps, .NET assemblies and websites, letting developers ask an agent to investigate how a feature works and rebuild it. Setup is done via 'npx rea-agents setup' and supports agents including Claude Code, Codex, Cursor, Gemini CLI and Grok Build, with analysis running locally and optional integration with Hopper, Ghidra or IDA for native code.
github.com
· 2026-10-12
A new open-source project called Edi Life OS combines ten workspaces—including habit tracking, Kanban boards, a Pomodoro timer, finance tracking and goal planning—into a single self-hosted dashboard built on PHP and MySQL. The tool includes a built-in MCP server that lets AI assistants like Claude read dashboard data, plan goals, log habits and track expenses on the user's behalf.
github.com
· 2026-10-09
Docker has introduced Docker Agent, a CLI plugin that enables users to build, run, and share AI agents using YAML configurations without coding. The platform supports multi-agent teams, a broad tool ecosystem, and compatibility with various AI providers, all deployable via Docker or OCI registries.
github.com
· 2026-10-07
A development team set out to run an entire month of coding work on the GLM 5.3 Flash model, keeping within a $68 budget for the first two weeks. The second half of the month saw usage spike to 1 billion tokens across other models, driven by an expensive vibe-coded Wagtail MCP server prototype that alone cost $150 and 5kWh, plus infrastructure capacity issues that forced switches to DeepSeek V4.1 Flash and Qwen 3.8 Flash.
wagtail.org
· 2026-10-02
GoKawiil