Fetching from the wire…
Tools2026-07-29 · source-backed
xyTom/coding-tools-mcp exposes 20 tools across files/search, execution, git, and runtime introspection, with a security model worth copying: safe/trusted/dangerous permission modes, kernel-level filesystem confinement on Linux via Landlock, one workspace root per server, and absolute path enforcement. Serialized tool-result bytes dropped 37% release-over-release through better summarization and pagination. Apache-2.0, 558 stars, works with Claude Desktop, Cursor, and Cline.
Each link below shares sources, entities, or timing with this story.
v0.10.0 (~84.8k stars, Apache-2.0) ships no agent of its own and drives whichever CLI you already have, Claude Code, Codex, Cursor, Copilot, OpenClaw, Gemini, Kimi, Qwen, Cline, plus BYOK OpenAI-compatible endpoints, via od mcp install <agent>. It produces single-page HTML pro...
open-design is a local-first macOS/Windows/Linux desktop app that turns your existing coding agent into a design engine, producing prototypes, landing pages, dashboards, slides, images, and video with real HTML/PDF/PPTX/MP4 export. It runs on 25 distinct local CLI executables...
Triple-stream retrieval (BM25 keyword, vector embeddings, knowledge-graph traversal) fused via Reciprocal Rank Fusion on the iii engine, with SQLite for state and an in-memory vector index, no external database. The economic claim: ~170K tokens/year (~$10) versus ~650K tokens...
Nothing touches your files until you accept it. shepherd-agents/shepherd (MIT, v0.3.0 on July 8) is a runtime substrate that captures agent execution as durable, inspectable traces that meta-agents can observe, fork, replay, and revert. Agent work is held as a reviewable propo...
Pair this with the espionage story and the picture gets uncomfortable fast. A new arXiv paper (2603.21642) presents the first systematic evaluation of prompt injection through tool-poisoning across seven MCP clients: Claude Desktop, Claude Code, Cursor, Cline, Continue, Gemini...
sv-number/mcp-server advertises tools for Claude, Claude Code, Cline, Cursor, and Windsurf that order a private number, read the incoming SMS verification code, and hand it back. Pure star velocity, no contribution, which usually means people are bookmarking rather than buildi...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.