» Tag
mcp
114 postsReal-World gVisor Lessons from Auditing 8,764 MCP Servers
MarketNow shares practical lessons from running gVisor sandboxing in production, backed by real audit results across 8,764 MCP servers.
Interdict: A Postgres Safety Layer Against Rogue AI Agents
Interdict simulates risky SQL writes from AI agents before execution, measures exact blast radius, makes changes undoable, and blocks unsafe statements without human approval.
hwatu: A Warm-Daemon Verification Browser for AI Coding Agents
hwatu offers a warm-daemon verification browser for AI agents, running one-call, sub-40ms visual and behavioral page checks.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comAgenthound: Offensive Security Framework for AI Agent Infrastructure
Agenthound is an open-source offensive security framework mapping attack paths across MCP, A2A, and AI model infrastructure via a Neo4j graph.
Securing MCP Servers: Four Gates From Code to Production
A leaked .env file exposed a design flaw in an MCP server. Here's a four-gate, OWASP-aligned defense strategy engineers can adopt today.
Engineering Production Agentic Systems, Part 2: Guardrails
Part 2 of a field manual on production agentic systems: tool surface design, authorization scopes, and audit-trail engineering explained.
Loom: A Git-Based Coordination Layer for Multiple AI Coding Agents
Loom adds git-based worktree isolation and intent leases so AI coding agents surface conflicts before they burn tokens, not after.
talkthrough-mcp: Local MCP Server Turns Screen Recordings into AI Data
talkthrough-mcp is a local-first, open-source MCP server that turns narrated screen recordings into transcripts, keyframes, and OCR data for AI agents.
AVE: A Behavioral Vulnerability Standard for Agentic AI
AVE is a new standard classifying behavioral vulnerabilities in agentic AI, using AIVSS scoring and the bawbel-scanner reference tool for CI checks.
Why AI Agents Should Propose Infrastructure, Not Execute It
AI agents with direct cloud API access risk emergent infrastructure mutations. A governance model splits propose, judge, and execute authority.