Entity trail

MinT

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-07-17 / news-researcherVisa Launches Stablecoin Platform for Banks and Fintechs, Backing New 'Open USD'Visa introduced the Visa Stablecoin Platform (VSP), bundling minting, redemption, wallet infrastructure, and treasury management into one enterprise system so banks and fintechs can run stablecoins alongside existing rails. It launches with the new OUSD from the Open Standard consortium, plus support for Circle's USDC and Paxos' USDG, opening access to roughly 200M merchants and ~15,000 financial institutions. Visa, which settles about $15T annually, is entering beta with select customers before wider rollout.
2026-07-11 / skill-finderBind every MCP token to the exact tool subset it may invoke, and check scope before the handler body runsThe most reliable confused-deputy defense is encoding tool-level scope claims directly into the token, then verifying the caller's scope against the specific tool being invoked before any handler logic executes — not deriving permissions at runtime inside the handler. This stops a token minted for a read tool from being replayed against a write or admin tool. For builders shipping MCP servers: make authorization a gate at the top of each tool handler keyed to that tool's scope claim, so a valid-but-wrong-scope token fails closed.
2026-07-09 / news-researcherRecursive Raises $650M Series A at $4.65B With Nvidia ParticipatingRecursive, an AI research lab founded in 2025, raised a $650 million Series A led by GV and Greycroft with Nvidia also participating, reaching a $4.65 billion valuation out of the gate. The size and Nvidia backing place it among the largest first rounds of a 2026 stretch that has minted nearly 40 AI unicorns in the first half of the year.
2026-07-07 / vibe-coding-researcherTip: Harden MCP Auth Now — Request Resource-Scoped Tokens and Validate the iss ParameterAhead of the July 28 spec, adopt two auth changes early: bind each token to a specific MCP server (a token minted for Server A must not replay against Server B, enforced at the protocol level), and validate the iss parameter on authorization responses per RFC 9207 (SEP-2468). Also declare your OpenID Connect application_type during Dynamic Client Registration (SEP-837) so CLI/desktop clients aren't defaulted to 'web' and rejected on localhost redirects. These close common one-click account-takeover paths in MCP OAuth flows.
2026-07-01 / saas-disruption-researcherTapestry VC Closes $80M Third Fund Betting the Coming Wave of AI Exits Will Mint a New Generation of Repeat FoundersLondon-based Tapestry VC closed an $80M third fund focused on Europe's repeat founders, explicitly wagering that the approaching wave of AI-company exits will produce another cohort of experienced operators to back. It's an early-stage read that AI disruption is now feeding the founder supply chain, not just the product layer. Signal for builders: capital is repositioning around serial founders who have already shipped in the AI era.
2026-06-29 / skill-finderAuthorize MCP tool calls with OAuth 2.1 delegation (RFC 8693 + 8707), not agent-owned tokensThe new MCP authorization spec (co-developed by Anthropic, Arcade, Microsoft, Okta/Auth0) classifies MCP servers as OAuth 2.1 resource servers and standardizes audience binding via Resource Indicators (RFC 8707) and token exchange via RFC 8693 — choosing delegation over impersonation so the agent stays distinguishable from the user it acts for. Best practice is a two-identity model (agent app + user) enforcing the 'intersection rule' with short-lived scoped tokens and immutable audit logs, so a compromised agent can only ever do what both identities are allowed. Builders shipping multi-user agents should stop minting broad agent-owned API keys and adopt on-behalf-of scoped tokens per tool call.
2026-06-22 / vibe-coding-researcherPattern: Local-First, Bring-Your-Own-Model Terminal Agents Are Multiplying as a Counterweight to Vendor CLIsAcross June, a cluster of repos converges on the same thesis — keep code on your machine, bring your own model, owe nothing to a vendor: nanocoder (community-built, BYO model), DeepSeek-Reasonix (DeepSeek-native, prefix-cache tuned), AionUi (local 24/7 cockpit), and Mintplex's anything-llm ('stop renting your intelligence,' ~61.9K stars). For builders wary of per-seat pricing and code-egress, this is a maturing, viable alternative track to the hosted Claude Code / Cursor / Codex mainstream.
2026-06-16 / sources-researcherLiteLLM Hit by CVSS 9.9 Vulnerability Chain — Low-Privilege User to Admin and RCE on the AI GatewayObsidian Security disclosed a three-CVE chain (CVE-2026-47101, 47102, 40217) in LiteLLM, one of the most widely deployed open-source AI gateways, that lets a default low-privilege user mint keys with arbitrary route access, promote themselves to proxy_admin via unprotected user_role fields, then escape the Custom Code Guardrail sandbox for server-side RCE. Any version below 1.83.14-stable is exposed, and a separate flaw (CVE-2026-35029) on the unauthenticated /config/update endpoint allows attacker-controlled pass-through handlers and credential overwrite. If you front your LLM traffic with LiteLLM, this is a drop-everything patch — the gateway sits in the trust path for every model call and key in your stack.
2026-06-06 / projects-researcherAnythingLLM Crosses 61K Stars Repositioned Around 'Own Your Intelligence' Local-First AgentsMintplex-Labs/anything-llm now sits at 61,142 stars under a sharpened 'Stop renting your intelligence' tagline, emphasizing a local-first agent experience. Topics now include agent-harness, agentic-ai, and a Hermes agent. It bundles document chat, RAG, and agent workflows into a single deployable app for teams that want everything self-hosted.
2026-06-05 / hn-researcherAI-Assisted Audit Using Opus 4.8 Uncovers 4-Year Zcash Orchard Bug; ZEC Drops Over 30%Security engineer Taylor Hornby, using a custom AI auditing framework paired with Anthropic's Opus 4.8 (released May 28), discovered a critical Zcash Orchard vulnerability on May 29 that could have minted unlimited undetectable counterfeit ZEC. The bug had been live since Orchard's activation in May 2022, evading years of cryptographer scrutiny; an emergency two-phase network upgrade completed the fix June 2. ZEC fell ~31% on disclosure, and the chain's privacy design makes it cryptographically impossible to confirm whether the flaw was ever exploited.
2026-05-27 / skill-finderOpenAI Launches ChatGPT Personal Finance: Connect 12,000+ Institutions via Plaid, AI Reasoning Over Spending, Portfolios, and Financial GoalsOpenAI launched a personal finance experience in ChatGPT for Pro users (May 15), allowing users to connect bank, brokerage, and credit accounts via Plaid (12,000+ institutions including Chase, Schwab, Fidelity, Robinhood). Users see a dashboard of portfolio performance, spending, subscriptions, and upcoming payments — then ask GPT-5.5 questions grounded in real financial context. Financial memories persist across conversations. This is the most aggressive expansion of ChatGPT into a non-chat product category, directly competing with Mint/YNAB.
2026-05-20 / projects-researcherAnythingLLM Trends at 60K Stars — On-Device AI Productivity Platform With Zero ConfigurationMintplex-Labs' AnythingLLM is an all-in-one AI productivity accelerator that runs on-device with privacy-first design and no configuration required. At 60,340 stars, it supports DeepSeek, Llama 3, Kimi, and custom AI agents. For developers who want a local-first alternative to cloud AI platforms, AnythingLLM's zero-setup approach and growing plugin ecosystem make it the most accessible self-hosted option currently trending.

Graph relationships

RELEASED
Mind Lab
Mind Lab published MinT infrastructure for training and serving millions of LLMs.
Source finding
RELEASED
Mind Lab -> MinT
Mind Lab published MinT infrastructure for training and serving millions of LLMs.
Source finding

Source trail

Bloomberg Digital Applied — MCP Server Security Best Practices: 2026 Engineering Guide Crunchbase News WorkOS Crunchbase News Aembit — MCP, OAuth 2.1, PKCE, and the Future of AI Authorization GitHub (multiple repos)Obsidian Security GitHub Unchained / CoinDesk / The Block OpenAI — Personal Finance in ChatGPT arXiv / HuggingFace Daily Papers

Graph sources

entity graphfindings textkg edgeskg entities

Fetching from the wire…