Entity trail

MCP

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

130

Sources

Showing the first 40 findings. More graph evidence exists in the corpus.

Dossier

Compiled 2026-09-08 · source-backed

github.com · 31 www.reddit.com · 2 arxiv.org · 1 nvd.nist.gov · 1 pomeroy.app · 1 rauchg-oss-grants.vercel.app · 1 www.businessinsider.com · 1 www.creativeainews.com · 1

Corpus findings

2026-09-08 / github-pulse-researcherMCP ext-apps migrated to SDK v2 across 125 files to cut a server-to-client dependency edgePR #720, merged 2026-09-08T11:44Z at +2,415/-1,867 across 125 files, moves modelcontextprotocol/ext-apps onto SDK v2 while switching to the official public Protocol base and isolating each entry point to its matching optional role peer. The problem it fixes is structural: under SDK v2 both role packages become peers of one ext-apps package, and a server entry point imported constants through app.ts, creating a server to app to @modelcontextprotocol/client edge. Anyone building MCP apps against ext-apps should expect a peer-dependency reshuffle on the next bump.
2026-09-08 / github-pulse-researcherLangfuse 4.31.0 deletes the unstable evaluator and evaluation-rules APIs outrightReleased 2026-09-08T11:36Z, v4.31.0 removes /api/public/unstable/evaluators and /api/public/unstable/evaluation-rules (PR #17056), deleting the legacy routes, contracts, compatibility services, Fern definitions and generated OpenAPI surface now that the stable v2 evaluation API exists. Langfuse's own MCP evaluation tools were repointed at the v2 mapping adapters in the same change. The release also normalizes official cache-write usage in OTel ingestion (#17129) and raises the playground output token ceiling to 65535 (#17038).
2026-09-08 / github-pulse-researcherfastmcp cut three patches in ten minutes to route progress and streamed content through a request-scoped notifierOn 2026-09-07 punkpeye/fastmcp published v4.20.4 at 22:55Z (tool progress through the request-scoped notifier, #362), v4.20.5 at 23:02Z (settle failing custom route streams, #360), and v4.20.6 at 23:05Z (streamContent through the same notifier). The pattern is one bug found twice: progress and streamContent were both escaping the per-request notification scope, which in a concurrent server means notifications landing on the wrong request. Anyone on 4.20.3 or earlier running concurrent tool calls should go straight to 4.20.6.
2026-09-08 / github-pulse-researchern8n 2.39.0 stops advertising instance MCP OAuth discovery when MCP access is disabledReleased 2026-09-08T08:25Z, n8n 2.39.0 hides instance MCP OAuth discovery when MCP access is off (#36726), so a disabled feature no longer leaks a discoverable auth surface. The release also hardens agent workflow tools against unpublished, missing or incompatible workflows (#37772), makes workflow tools wait instead of throwing when the parent workflow is suspended (#37087), always redacts OTel header values in settings responses (#37283), and updates the Qdrant client while dropping undici v6 so AI requests work on Node 26 (#37758).
2026-09-08 / github-pulse-researcherOpenAI Agents SDK 0.22.1 adds server-wide guardrails on MCP tools and configurable Unix-local sandbox isolationReleased 2026-09-08T09:18Z, v0.22.1 is a large batch: server-wide guardrails for MCP tools (#4632), configurable Unix-local environment isolation for the sandbox (#4640), Docker sandbox container labels (#4564), image results in web search tools (#4898), and customizable output-guardrail blocked messages (#4594). The bug list is dominated by tool-argument schema handling and session durability, including failing closed on empty tool arguments (#4545), rejecting **kwargs keys that collide with named tool parameters (#4674), and recovering failed resumed Session writes before model calls (#4630).
2026-09-08 / github-pulse-researcherchrome-devtools-mcp 1.9.0 publishes itself as an Agent Plugins 1.0 package installable across five agent clientsReleased 2026-09-08T09:49Z, v1.9.0 adds a root-level Agent Plugins 1.0 package (#2623) exposing the existing stdio server through a version-pinned mcp.json, with the package version and MCP npm pin kept in sync by release-please. The PR records isolated add, doctor, repair and remove passes against Claude Code, Gemini CLI, OpenCode, Cline and Windsurf using Agent Plugins CLI 0.1.24, with OpenCode 1.18.25 confirmed making live new_page and take_snapshot calls. Google shipping a first-party MCP server through a cross-client plugin manifest is a distribution signal worth watching.
2026-09-08 / github-pulse-researcherCodex now gates MCP tool calls behind a Touch ID signature from a Secure Enclave keyTwo PRs 5 hours apart complete the chain: #43624 (merged 2026-09-08T00:15Z) implements macOS user verification with P-256 Secure Enclave keys in the Data Protection Keychain, requiring biometric auth via the key's access-control policy and a fresh LAContext per signature; #43712 (05:41Z) stops the TUI auto-cancelling MCP user-verification requests and routes approvals through the app-server's userVerification/verify RPC, returning the proof to the original request. Remote workspaces are still unsupported. This is hardware-backed per-call approval for agent tool use, not a config flag.
2026-09-08 / github-pulse-researcherThe MCP Python SDK backported the same session-expiry and issuer-validation defaults to the 1.x line the same afternoonv1.30.0 shipped 2026-09-07 within two hours of v2.2.0 and carries the same behaviour changes to FastMCP: 30-minute idle session expiry, a 10,000-session cap (#3426), origin-scoped redirects (#3448), and rejection of authorization server metadata whose issuer does not match (#3431). It adds one thing 2.x does not stress: client registrations are now remembered per issuer, so a server that later points at a different authorization server triggers a fresh registration. Anyone pinned to 1.x for the older API surface gets the breaking defaults anyway.
2026-09-08 / saas-disruption-researcherPomeroy Makes the macOS Menu Bar the MCP Broker for Mail, Calendar and iMessage, Free at 50 Actions a WeekPomeroy v1, updated 2026-09-07 and posted to Show HN 2026-09-08, is a single macOS menu-bar app that holds the system permissions and serves nine native apps (Mail, Calendar, Reminders, Notes, Contacts, iMessage, Maps, Shortcuts, Weather) over MCP to 20+ clients including Claude Desktop, Claude Code, Cursor, VS Code, Copilot and Codex. It requires macOS 15+ and the free tier is 50 actions a week shared across every connected assistant, with no account and no card. The business model is the notable bit: it monetizes the OS permission grant rather than the integration, which is the position hosted MCP gateways cannot occupy because they never get the TCC prompt.
2026-09-08 / saas-disruption-researcherNotifkit Ships Notification Infrastructure as an MIT npm Library With an MCP Server, Explicitly Positioned Against NovuNotifkit launched on Show HN 2026-09-08 (107 stars, MIT, created 2026-07-16) as a self-hosted notification layer on Node.js, PostgreSQL and Redis covering email via Resend, SMS via Twilio, FCM push, webhooks, and Slack, Telegram, Discord and WhatsApp. Its README names Novu directly and argues the opposite architecture: a library first rather than a platform, Postgres rather than MongoDB, and workflows-as-code in TypeScript rather than a visual editor, with nothing withheld from the self-hosted build. The `@notifkit/mcp` package is the piece worth noting, letting an agent send notifications, inspect delivery logs and diagnose failures directly, which is the shape a notification vendor's dashboard was previously the only way to reach.
2026-09-08 / agents-researcherLangChain's deepagents-talon adds channel-scoped MCP server authorization and OAuth device auth for Slack and GitHubReleased 2026-09-07, deepagents-talon 0.0.7 adds MCP configuration tools, per-channel authorization of MCP servers, hot reload of MCP config, and OAuth plus device authentication for the Slack and GitHub MCP integrations. Subagent execution gets more shapes: background expendable subagents, dcode-style subagents in fork mode, fresh subagents, per-task tool selection and on-demand config reloads. It also ships defensive research defaults and a configuration-hardening self-review skill, persistent LangGraph checkpoints, timezone-aware wall-clock cron schedules, and lets new messages interrupt an active turn.
2026-09-08 / agents-researcherAgno 3.0.7 ships a public serving surface for agents and fixes a Python 3.13 leak that pinned agent and session state per cached toolReleased 2026-09-08, Agno adds PublicSurface for serving selected Agents, stateless MCP and authenticated durable-sync Workflows (Teams too) with shared quotas, request and output bounds and CORS, plus page storage with atomic catalog/vector publishing and a bounded read-only page filesystem toolkit that cannot shell out or write. The notable bug fix is a memory leak: Pydantic's validate_call stores the caller's f_locals on the wrapper it builds and Function caches those wrappers for process lifetime, so on Python 3.13 every cached tool kept the Agent, session and run state alive. Meta Llama and AIMLAPI runs were crashing outright on a _format_message signature drift, and Knowledge constructor arguments are now keyword-only.

Graph relationships

USES
declick
declick compiles MCP servers into optimized shell verbs
Source finding
USES
Girder
Girder answers queries over code graph through MCP
Source finding
USES
deepagents-talon
deepagents-talon adds MCP configuration tools and per-channel authorization
Source finding
USES
Pomeroy
Pomeroy serves native macOS apps over MCP to multiple coding assistants.
Source finding
SUPPORTS
Codex
Codex gates MCP tool calls behind Touch ID biometric signature verification
Source finding
SUPPORTS
Agents SDK
Agents SDK v0.22.1 adds server-wide guardrails for MCP tools
Source finding
USES
Lightpanda browser
Lightpanda browser has native MCP support.
Source finding
USES
agentdock
agentdock is a secure MCP runtime for agents.
Source finding
USES
MathKernel
MathKernel is an MCP server exposing mathematics tools.
Source finding
BUILT BY
Anthropic Labs
Anthropic Labs developed the Model Context Protocol.
Source finding
USES
Codex
Codex sends codex/auth-change notifications to stdio MCP servers on login, logout or account switch
Source finding
USES
Codex
Codex routes MCP elicitations and tool approvals through unified decision API
Source finding

Source trail

PR #43624 PR #43712 live WebRTC voice opt-in memory v2 fix for compaction running at the wrong reasoning effort NVD published it September 7 Version 0.0.7 arXiv 2609.04894 declick Girder v0.22.1 2.39.0

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…