Entity trail

Fetch AI

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Corpus findings

2026-08-27 / reddit-researcherr/LocalLLaMA Reverse-Engineered Qwen4's N-Gram Architecture: MoE Does Reasoning, N-Grams Do Recall, and Only RAM WorksA 217-upvote r/LocalLLaMA writeup breaks down the Qwen4Exp architecture behind Qwen3.8-Flash-Next: a router picks experts late in the layer with a large payload, so experts resist offload, while an n-gram table is a hash lookup known early and cheap to fetch. The author's conclusion is that roughly 25 percent of weights can move to n-gram before the tradeoff inverts, turning a 176B model into 125B in RAM plus 51B elsewhere. The thread's correction to the original SSD claim matters for builders: the n-gram index is hashed, so access is random and RAM is the only viable tier.
2026-08-27 / vibe-coding-researchermcp-fetch's SSRF Guard Skipped Every Private-Address Check on Bracketed IPv6 (CVE-2026-80347, 8.7)NVD published CVE-2026-80347 on 2026-08-26 against kazuph/mcp-fetch through 1.6.3. isSafeUrl reads the hostname from the parsed URL, which for http://[::1]/ yields the bracketed string, then tests it with net.isIP; that returns zero for a bracketed value, so the entire private-address branch is skipped, DNS resolution of the bracketed string returns nothing, and the target is declared safe before the HTTP client strips the brackets and connects. Because the address can be given in IPv4-mapped ::ffff: form, this reaches any IPv4 target the loopback checks existed to block, including metadata endpoints, and the fetch URL is a tool argument, so prompt injection is a sufficient trigger.
2026-08-25 / github-pulse-researcherThe official Claude community plugin marketplace now carries 2,282 plugins, every one of them pinned to a commit SHAanthropics/claude-plugins-community is a read-only mirror of the Claude Cowork and Claude Code plugin directory, and its .claude-plugin/marketplace.json is a 1.5 MB machine-readable census: 2,282 entries, 1,876 fetched by URL and 401 as git subdirectories, with every URL source carrying an explicit commit `sha`. It gained 877 stars in the past week against a 1,539 total. Only 157 entries declare a category, so 2,125 are uncategorized, which makes the file more useful as a raw inventory than as a browsable taxonomy.
2026-08-24 / reddit-researcherLattice Ships an Isometric Game Kit Built for Agents: 12 Skills, 9 Zero-Dependency TypeScript Packages, 80KB Gzipped CoreLattice (github.com/plausibleventures/lattice, pushed 2026-08-23, 20 stars) packages TypeScript libraries, agent skills and plugins for building isometric games, with a zero-dependency 80KB gzipped core rendering to 2D canvas. The design constraints are aimed squarely at agent authorship: the game and UI must be fully deterministic as a hard rule, and no external assets are required, so there are no sprite sheets for an agent to fetch or get wrong. It drew 223 upvotes on r/ClaudeAI, which is a strong signal for a repo this new and is worth watching as an example of shipping agent skills alongside a library rather than after it.
2026-08-24 / reddit-researcherClaude Code 2.1.239 Adds a `/claude-api upgrade` Migration Command and Surfaces the 1.1x US-Only-Inference Premium in Cost EstimatesThe 2.1.239 release, shipped just ahead of 2.1.241 on 2026-08-23, is the substantive one in this batch. Notable entries for builders: cost estimates now include the 1.1x US-only-inference premium for data-residency workspaces, a new `/claude-api upgrade` command migrates Python projects from `anthropic` 0.x to 1.x, usage-limit messages now say whether it is the session or the weekly limit resetting, and WebFetch no longer retains expired content for the whole session instead of the documented 15 minutes. The two releases after it, 2.1.240 and 2.1.241, are listed only as bug fixes and reliability improvements.
2026-08-24 / projects-researcherScrapling v0.4.15 Splits Its MCP Server Into One-Shot and Session Tools, and Locks HTTP Transport Behind Auth by DefaultD4Vinci/Scrapling released v0.4.15 on 2026-08-23, restructuring its MCP server into one-shot tools (fetch, bulk_fetch, stealthy_fetch) and session-based tools (session_fetch, open_request_session, session_make_request) that retain cookies and fingerprints across calls, and renaming the get tool to make_request with any HTTP method. The HTTP transport now requires an auth token and binds to localhost by default, which is a breaking change and an unusually security-conscious default for an MCP server. A new Response.markdown() strips scripts, styles and hidden prompt-injection content to produce RAG-ready text, and SiteToMarkdownSpider crawls a whole site into a markdown corpus.
2026-08-23 / saas-disruption-researcherFetchSandbox MCP Launched at Product Hunt #2 Selling 70+ API Sandboxes as a Reproduce-Fix-Prove Loop for Coding AgentsRaj Nagulapalle's FetchSandbox MCP took #2 with 107 votes on Aug 23, offering 70+ API sandboxes wired into Cursor or Claude Code via MCP config. Its claim is narrower and more testable than most agent tooling: reproduce the real integration failure against a sandbox, apply the fix, then re-run to prove the failure is gone, with the tagline 'a receipt, not a vibe.' It targets the gap where an agent's fix passes CI but breaks against a live third-party API, which is the failure mode that makes teams distrust agent-written integration code.
2026-08-22 / thought-leaders-researcherSimon Willison ships llm-openrouter 0.7 with three server-side tools: Shell, WebFetch and WebSearchReleased August 21 alongside LLM 0.32 compatibility, the plugin now surfaces reasoning traces for OpenRouter models, supports the OpenRouter Responses API, and exposes three tools that run on OpenRouter's side rather than locally. Server-side Shell in particular means a CLI user can hand a model an execution environment without provisioning one, which changes the threat model for anyone piping LLM output into a script. This is the same tool trio most agent harnesses hand-roll, now available as a one-line plugin install.
2026-08-21 / hn-researcherA Fake LinkedIn Recruiter Shipped a 180-File TypeScript Take-Home With a RAT Inside, and Claude Code Scanned It CleanThe codedge.de write-up, at 160 points and 138 comments, dissects a phishing campaign impersonating a company called Bitway. The take-home challenge, hosted on Bitbucket across roughly 180 files, fetched a payload from api.jsonbin.io on 'npm run dev', unwrapped 24,686 characters of obfuscator.io JavaScript around a webpack bundle, and phoned home to [redacted]. Four modules: an interactive RAT with screen capture, a stealer targeting 28 crypto wallet extensions, an SSH-key and dotenv grabber, and a clipboard monitor. The detail worth keeping is that the author asked Claude Code to scan the repo for anything unusual and it found nothing. Post dated August 17, updated August 20.
2026-08-21 / vibe-coding-researcherTip: Restrict Which Sites a Managed Agent Can Reach With `allowed_domains` and `blocked_domains`Claude Managed Agents now accept `allowed_domains` or `blocked_domains` on the `web_search` and `web_fetch` entries in the `agent_toolset_20260401` `configs` array. `web_fetch` also takes `max_content_tokens` and `web_search` takes `user_location`. This is the cheapest available defense against indirect prompt injection through fetched pages: pin the agent to the handful of domains it actually needs rather than trusting it to ignore whatever a hostile page tells it.
2026-08-21 / projects-researcherShow HN: ParqDB Runs Vector Search in the Browser by Range-Requesting Parquet Over HTTPParqDB does similarity search client-side against Parquet files fetched over plain HTTP, with no database server and no index service behind it. It posted 21 points and 4 comments twelve hours old, so this is early rather than validated. The architecture is the point: if the index is a static file on a CDN, the entire retrieval tier of a small RAG app disappears into hosting cost.
2026-08-20 / reddit-researcherQwen3.8-27B Lost Ground on Raw Knowledge Against Qwen3.6, and Artificial Analysis' Omniscience Benchmark Backs the VibesA practitioner running a private trivia set found Qwen3.8-27B failing questions Qwen3.6 answered reliably, at every quantization level and sampling setting tried, then checked Artificial Analysis' Omniscience evaluation and found the same regression in offline no-tool knowledge accuracy. The top reply (112 upvotes) corroborates it from a different angle: 3.8 is markedly more eager to reach for web search, and with search and fetch tools disabled the knowledge gap shows up clearly. The practical read for builders is that 3.8 appears tuned to lean on tools rather than weights, so an airgapped retrieval-from-weights setup should stay on 3.6.

Graph relationships

RELEASED
Agentverse SDK
Fetch.ai released the Agentverse SDK.
Source finding
RELEASED
Agentverse
Fetch AI launched Agentverse, an open directory hosting millions of registered agents.
Source finding
RELEASED
ASI:One
Fetch AI launched ASI:One Business tier for agent operations.
Source finding
WORKS AT
James Riehl
James Riehl works at Fetch.ai.
Source finding
WORKS AT
James Riehl -> Fetch AI
James Riehl works at Fetch.ai.
Source finding

Source trail

r/LocalLLaMA NVD GitHub GitHub plausibleventures/lattice, surfaced via r/ClaudeAI (223 upvotes, 22 comments)anthropics/claude-code releases and CHANGELOG.md (2.1.241 published 2026-08-23)GitHub Product Hunt GitHub (simonw/llm-openrouter)codedge.de / Hacker News Claude Platform Release Notes Show HN r/LocalLLaMA (cites artificialanalysis.ai/evaluations/omniscience)

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…