Fetching from the wire…
01
02
03
04
05
06
07
08
OSS2026-09-24 · source-backed
An MIT-licensed Rust proxy where each agent's token is worthless outside the proxy. It checks an ACL, strips the token, attaches the real credential pulled from 1Password, and logs every decision to a hash-chained audit log. About 50 service profiles (GitHub, Stripe, Cloudflare, Sentry), MCP server support, per-process workload identity, Homebrew install (vpetersson.com). This is a direct answer to the credential-authority problem sitting underneath today's breach stories, and the hash-chained log is the piece that makes it useful after an incident rather than just during one.
Each link below shares sources, entities, or timing with this story.
Every story above generates tokens, and tokens are money. rtk is the clearest "do this today" item in the whole dataset. It's a single Rust binary, 59,658 stars, created January 22 and pushed as recently as June 7, that proxies common dev commands and claims 60 to 90% reductio...
Platform v1.4.0-beta.9, September 15, adds a generic APPA plugin lifecycle to the proxy and integrates OpenAPPA at the LLM proxy guardrail checkpoints (GitHub). It also unifies credentials across Agent Runtime, MCP and GitHub integrations, shares GitHub user connections across...
Waishnav/devspace (4,247 stars, v1.0.8 August 25) runs a local Node server exposing read, edit, search and shell execution over MCP, reached through a reverse proxy tunnel like Cloudflare or ngrok, with password-gated owner approval per client. The pitch is turning ChatGPT int...
Hudson Rock got hold of the archive and counted it. 433,909 files. 118,829 CI runner dumps traced to 2,488 corporate domains. AWS keys, Salesforce client secrets, Slack signing secrets, Azure environment variables, and AI provider API keys belonging to NVIDIA, Volkswagen, Micr...
RyanAlberts/best-of-Agent-Harnesses is a weekly-rescored ranking that also ships an MCP server, llms.txt, and JSON, so agents themselves can query and recommend harnesses. It's two things at once: a useful landscape reference for picking a harness, and a clean example of the "...
The most under-hyped tool of the week is a single Rust binary with zero dependencies that sits between your coding agent and your terminal, compressing command outputs before they hit the context window. rtk (Rust Token Killer) intercepts common dev commands — cargo test, git...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.