OSSCLI vs MCP 94% Token SavingsGitHub·high signalXBlueskyLinkedInCopy linkBlog plus CLIHub tool showing 94% token savings by replacing MCP tool schemas with CLI wrappers. Could reshape how agent tool integrations are built.SourceSource pageGitHub↳ Follow the threadStack layer / ContrastCline v4.1.16 fixes hooks resolving from global state, and starts redacting credentials embedded in git remote URLs before they reach the modelGitHub (cline/cline)Policy dependency / Stack layerHalofy ships an open governance layer for agents with identity, policy, provenance, audit and signed erasureGitHubStack layer / ContrastGradient open-sources a full reinforcement-learning loop for training tool-using research agents with GRPOGitHubThreat pattern / Update threadHolmesGPT 0.40.0 is almost entirely a security release: command injection across five toolsets, SSRF, and signed bash approval prefixesGitHubStack layer / Update threadcodeburn shipped three synchronized v0.9.22 artifacts in 31 minutes on August 25, tracking AI coding spend across 37 tools at 9,683 starsGitHubThreat pattern / Update threadgemini-cli Blocks SSRF Through MCP OAuth Discovery, Including DNS RebindingGitHubPolicy dependency / Update threadAgno 3.0.1 caches tool schemas across runs and loads session history incrementally, so response time stops scaling with conversation lengthGitHub (agno-agi/agno)Threat pattern / ContrastChainlit's MCP endpoint gives unauthenticated RCE when enabled, because the allowlist checks the executable and ignores the argumentsGitHub Advisory Database