Notes from building on this stack.
Current, specific, cited analysis on Claude, the Model Context Protocol and AI agent tooling, written for developers and builders rather than for press releases. New posts as things actually happen.
Archive
- September 9, 2026Deadbugz: The MCP Supply-Chain Attack That Waits for Three CallsA malicious MCP server hides its payload until the third tool call, then rewrites its own metadata to hunt for SSH keys, AWS credentials, and Kubernetes configs. One-time review cannot catch this.
- September 8, 2026MCP Python SDK v2.1.0: What Changed for Developers Shipping on the 2026 SpecThe first minor release since v2.0.0 stabilized around the 2026-07-28 spec. Client simplifications, error handling hardening, and SSE/OAuth limits.
- September 7, 2026Agent Skills Need a Permissions Manifest, But a Manifest Alone Is Not EnforcementThe Agent Skills format standardised distribution before authority. SKILL.md bundles executable code but cannot declare which files that code may read. Packslip and Grith show the three-layer fix.
- September 6, 2026MCP Goes Stateless: What the 2026-07-28 Spec Changes for DevelopersThe Model Context Protocol 2026-07-28 specification drops session state for a stateless HTTP core, unlocking horizontal scaling and new patterns like Multi Round-Trip Requests.
- September 4, 2026Google's A2A Protocol Joins the Agentic AI Foundation — What It Means for Multi-Agent SystemsA2A and MCP now share a governance home. Here's what the convergence means for developers building multi-agent systems.
- August 28, 2026Anthropic's Model Hardware Standard: AI Agents Meet the Physical WorldMHS extends the Model Context Protocol from virtual tools to lab robots, microscopes, and manufacturing systems.
- August 26, 2026Anthropic's AI-Native SDLC Playbook: What It Actually Means for Teams Shipping on ClaudeAnthropic published a stage-by-stage playbook for transforming software development with AI. Here's what's practical, what's aspirational, and what developers building on Claude and MCP should take from it.
- August 23, 2026MCP Roadmap Update: Five Priority Areas for the Next Spec ReleaseThe Model Context Protocol published an updated roadmap covering agentic messaging, HTTP transport, agent identity, improved primitives, and SDK experience.
- August 22, 2026How Anthropic Engineers Actually Use Claude Code: The Multi-Agent Workflow Nobody Talks AboutAnthropic engineers run a hierarchy of specialized agents — leads, PMs, ICs — driving 8-10 parallel projects with 30-50 prompts/day. Here's what their workflow reveals about using Claude Code as a multi-agent runtime.
- August 21, 2026Anthropic's IPO Moment: What a $75B Filing Means for the Agent StackBloomberg reports Anthropic is preparing a public offering that could rival SpaceX's $75B debut. For developers building on Claude, MCP, and the open agent ecosystem, this isn't just a financial milestone — it's a structural signal.
- August 20, 2026Opus 5's Benchmark Trap: Why the "Best" Model Feels Worse to UseOpus 5 scores higher on benchmarks but feels worse for daily coding. The reason: benchmarks reward bold assumptions; real engineering punishes them. Here's why and what to do about it.
- August 19, 2026AI Agents Have a Supply-Chain Phishing ProblemIsland security research found 7,600 malicious GitHub repos in the FakeGit campaign. Over 800 posed as agent skills or MCP servers. Attackers call it AgentBaiting — they publish convincing repos and wait for agents to discover them. Here's what developers building with MCP and AI agents need to know.
- August 16, 2026AI Coding Tools Forget Context Because They Don't Write to Disk, Not Because of Context WindowsEvery AI coding tool has the same top complaint: it forgot what we were doing. A developer tested six tools and found half write nothing to disk. The problem isn't context windows — it's persistence.
- August 13, 2026Claude Managed Agents Gets Multi-Agent OrchestrationFour August platform releases give agent builders session budgets, advisor models, GitHub-backed skills, and inference geo control — the primitives for running agent fleets in production.
- August 13, 2026Claude Code Auto Mode Goes Default Tomorrow — What Developers Need to KnowStarting August 14, auto mode becomes the default permission mode for new Claude Code sessions. Here's what changes, what risks remain, and how to prepare your workflow.
- August 12, 2026OJCP — The Open Standard for Agent-Consumable Job FeedsOJCP defines how AI agents discover, reason over, and act on job opportunities. Built on MCP. Interoperable with schema.org. Governed by an independent steering committee.
- August 10, 2026ComOS Federation: One MCP Gateway for Every AI Commerce StoreComOS Federation is a multi-tenant MCP gateway that replaces per-platform commerce integrations with a single connection. What it does, how the virtual context routing works, and what it costs you to adopt.
- August 8, 2026Claude Code Sessions Can Now Talk to Each Other. Here's Why That Matters.Claude Code shipped cross-session messaging. Sessions can now discover, message, and coordinate with each other across machines. This isn't just convenience - it's the foundation for treating Claude Code as a networked agent runtime instead of isolated chat windows.
- August 6, 2026Cloudflare OS Is an Open Platform for Agents. That Changes Everything.Cloudflare OS launched as an open-source platform combining agent chat, sandboxed app development, and a Gatekeeper security framework. Built on Kenton Varda's Sandstorm architecture and deeply infused with AI, it's the most ambitious bet on agent-native infrastructure yet - and it changes how developers should think about building agent products.
- August 4, 2026Qwen3.8-Max Is a 2.4T-Parameter Open-Weight Agent. This Changes the Game for Builders.Alibaba launched Qwen3.8-Max: a 2.4T open-weight MoE model with million-token context that ran a coding agent autonomously for 16 days. The ground shifts.
- August 4, 2026Amazon raised the Kindle 70% royalty ceiling to $12.99, and almost nobody noticedOn 7 July 2026 Amazon moved the Kindle 70% royalty band to $12.99, its first change since 2007. Almost every guide and calculator still says $9.99.
- August 2, 2026What Tasks and MCP Apps Actually Change for Agent InfrastructureThe MCP 2026-07-28 spec shipped two official extensions - Tasks and MCP Apps - that transform the protocol from a tool wire format into an agent runtime. Here's what each one changes for developers shipping production MCP servers today.
- August 1, 2026Claude Code now has its own browser. That changes how you ship.Claude Code's built-in browser (Week 28) isn't just convenience - it removes the biggest friction in agentic development workflows. Here's how the sandboxed in-app browser and the Chrome extension serve different needs, and why the combination matters.
- July 31, 2026MCP 2026-07-28 has shipped. Here's what your migration actually looks like.The biggest MCP revision in 20 months shipped July 28. The SDK betas, codemod, and migration guide are real now. Here is what the migration actually looks like.
- July 29, 2026OpenAI Presence: Why the Enterprise Agent Platform Shift Matters More Than You ThinkOpenAI's move from API provider to enterprise agent platform signals a fundamental shift in how AI will be deployed. What it means for builders on Claude and MCP.
- July 29, 2026AI Coding Agents Are Siloing Your TeamTwo new studies converge on one finding: AI coding agents turn developers into lone wolves. CooperBench and a 25,264-PR analysis reveal the cost nobody planned for.
- July 28, 2026robots.txt vs noindex: the Claude chats lessonShared Claude chats got indexed by Google despite a robots.txt Disallow rule. The reason is a lesson every developer should know: crawling is not indexing.
- July 27, 2026CLAUDE.md is advice. Hooks enforce it.Claude Code PreToolUse hooks run before every tool call and can block it entirely. That matters more than any CLAUDE.md instruction once the context window fills up.
- July 26, 2026The 80% rule: context engineering for Claude 5Anthropic deleted over 80% of Claude Code's system prompt for Opus 5 and their coding evals did not move. The explanation matters more than the headline number.
- July 25, 2026SharedRoot: what a Cowork sandbox escape teaches us about AI agent securityAccomplish AI found a VM escape letting an untrusted Cowork session read SSH keys and cloud credentials from the host Mac. The CVE is just the entry point.
- July 25, 2026MCP goes stateless on July 28. Here's what breaks and what gets cheaper.The biggest MCP spec update since launch ships Tuesday - sessions disappear, the init handshake is gone, and three features get a 12-month deprecation clock.
- July 24, 2026Claude Opus 5 just shipped. Here's what actually matters if you're building agents.Claude Opus 5 shipped today. Three quiet API changes matter more than the benchmark charts for developers building agents on Claude and MCP infrastructure right now.