buildOne report1 publisher MCP makes Roots, Sampling, Logging and Dynamic Client Registration eligible for removal from July 28, 2027
Roots, Sampling, Logging and Dynamic Client Registration become eligible for removal from MCP on July 28, 2027, a DEV Community post says. No removal can ship before the first revision released on or after that date, so server owners have time to find out what they depend on.
Reality
- Evidence55
- Adoption50
- Hype gap+5
- Incentives
- Not scored
- Confidence55
MCP's 2026-07-28 specification drops sessions so any server instance can answer any request
Remote MCP servers can run behind a plain round-robin load balancer under MCP's final 2026-07-28 specification, released on July 28, 2026. It also contains breaking changes that production teams need to test first.
Publishers:blog.modelcontextprotocol.io
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence60
Per-seat pricing for AI agents ranks last in G2's survey, with 9% of 1,019 buyers calling it fairest
G2's survey of 1,019 B2B buyers finds only 9% call per-seat pricing the fairest way to charge for AI agents, against 57% for pay-as-you-go. Vendors that kept agents inside seat plans go into 2027 renewals on the model buyers rank last, according to saastr.com's write-up.
Reality
- Evidence50
- Adoption66
- Hype gap+30
- Incentives
- Not scored
- Confidence55
Forum seller offers MONST3R-AI, an autonomous scanner billed to the owners of stolen AI keys
Bitsight says a forum seller is marketing MONST3R-AI, an autonomous pentest tool that runs on stolen OpenAI, Anthropic and Google API keys. The key's owner pays for the scans, and fake agent plugins in public registries are a second route to malware.
Reality
- Evidence50
- Adoption30
- Hype gap+15
- Incentives55
- Confidence55
buildOne report1 publisher mcp-cpp brings MCP's 2026-07-28 spec to C++17 with no async runtime and no OpenSSL
mcp-cpp's authors say running their C++17 SDK through MCP's official conformance suite exposed five SDK bugs and one fault in the harness. The post's text breaks off before it explains the harness bug.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence50
buildConfirmed2 publishers Anthropic and OpenAI have each capitalized a separate services firm, $1.5 billion and over $4 billion, to embed engineers in enterprises. Wing partner Tanay Jaipuria treats that as evidence of an integration bottleneck.
Publishers:tanayj.com · thedatavist.substack.com
Reality
- Evidence40
- Adoption30
- Hype gap+25
- Incentives70
- Confidence45
SolarWinds launched Avior, a standalone AI agent for first-line IT work that holds anything it classes as potentially dangerous for human approval. The company says models decide what needs doing while a fixed, auditable framework controls how, so a rollout turns on where the vendor draws that line.
Perspective Coverage
3 publishers
- Builder
- Builder 27%
- Operator
- Operator 60%
- Investor
- Investor 13%
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+30
- Incentives70
- Confidence65
buildConfirmed2 publishers Workday made Sana Home the starting point for work and put Agent Harness into general availability, with both priced on Flex Credits. Agents built on it run in isolated environments over finance and HR data, Constellation Research reported.
Reality
- Evidence30
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence45
buildConfirmed2 publishers Workday made its MCP server, SQL access to live data and a shared agent runtime generally available on Tuesday. Agents built in Claude Code or Cursor run under the signed-in user's permissions, the company says.
Reality
- Evidence45
- Adoption25
- Hype gap+25
- Incentives75
- Confidence65
buildOne report1 publisher claude.ai hung up on a slow MCP server after 4.7 seconds, well before a cold replica could answer
claude.ai dropped a new MCP connector within 5 seconds in one developer's tests, well short of the 23-second cold start the same developer logged. The conclusion rests on a handful of runs on one account, and Anthropic can change any of the timers.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Databricks isolates app and database limits in its Lakebase Search sizing test
Databricks tests Lakebase Search on 1M to 4M rows, using a 23,000-row internal app as its baseline. A search request touches two computes, the app's and the database's, and either one can set the limit.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap+15
- Incentives65
- Confidence55
Harmonic Security raises $50M Series B and has extended its AI checks beyond the browser to desktop apps and agentic workflows
Harmonic Security raised a $50 million Series B led by Crosspoint Capital Partners to govern how employees use AI tools. Its checks began in the browser and now cover desktop AI apps and agentic workflows, the company says.
Reality
- Evidence40
- Adoption45
- Hype gap+15
- Incentives70
- Confidence55
Companies are giving AI agents access before they can trace or stop them, Salt Labs data shows
Salt Labs found 49.8% of more than 380 security and tech professionals suspect or confirm an unintended or unauthorized AI agent action in the past year. Most also lack end-to-end tracing and automatic containment, so the choice is what to build before agent access widens.
Reality
- Evidence50
- Adoption60
- Hype gap+25
- Incentives75
- Confidence55
buildOne report1 publisher Ruflo's 100-agent swarm for Claude Code starts in read-only mode with approval switched on
Cognitum One released a new Ruflo on October 13 that turns one coding assistant into a swarm of 100+ agents. The parts worth copying are the controls around the model: approval modes, cost visibility and data gating.
Reality
- Evidence25
- Adoption55
- Hype gap+30
- Incentives70
- Confidence55
buildOne report1 publisher Gems and custom GPTs convert on the vendors' calendars, with tools and sharing left behind
OpenAI's FAQ says custom GPTs retire on December 11, 2026, and migrated plugins lose model choice, actions and sharing settings. Google is converting Gems into skills on a separate schedule, and a dev.to author advises copying instructions and files out first.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap−5
- Incentives35
- Confidence55
Workday agrees to buy C1.ai so it can control what AI agents touch and when access ends
Workday has signed a deal to buy C1.ai, an identity governance firm that decides what people and AI agents can touch. Bhusri says Workday's agents run on one security model, so folding C1.ai into it is the first test.
Reality
- Evidence40
- Adoption50
- Hype gap+25
- Incentives70
- Confidence55
buildOne report1 publisher Workers Issues can now wake an incident agent through a signed MCP Event
Cloudflare's API MCP server sends a signed MCP Event to a client webhook when Workers Issues detects a new or recurring production failure. An incident agent can start from that event without a polling loop. A dev.to walkthrough says the event should open a read-only investigation and leave any production change behind human approval.
Reality
- Evidence50
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence55
buildOne report1 publisher Claude's four $400 payments cleared a $500 single-payment cap in Pink's 80-run test
Pink's 80-run test of Claude and Gemini found two Claude runs that split a $1,600 order into four $400 payments under a $500 cap. The coffee template does not ship a velocity cap by default, and Pink scored its own runs.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap−10
- Incentives65
- Confidence50
buildOne report1 publisher ShipStation reports its Deckhand agent resolved 97.5% of help desk channel queries
ShipStation Global says its Slack IT agent, Deckhand, resolved 97.5% of incoming channel queries and drew 96% positive feedback. Both figures are self-reported from one help desk channel, so they transfer only where answers already exist in writing.
Reality
- Evidence35
- Adoption25
- Hype gap+30
- Incentives75
- Confidence70
Scanner-clean AI agent still carried four design flaws that no CVE will describe
In a post on aminrj.com, an OWASP working-group member says CVEs fit only two of six places where AI agent and MCP flaws live. Over-broad permissions, shared service accounts and confused-deputy designs sit in the other four, where a scanner has nothing to flag.
Publishers:aminrj.com
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+10
- Incentives35
- Confidence55
Earlier coverage
- SailPoint extends identity controls to AI agents, with open questions on runtime authorization
Security · October 11, 2026 · Confirmed2 publishers
- Google Cloud's Gemini agent carries one memory into Microsoft 365, Slack and the command line
Product · October 8, 2026 · Confirmed23 publishers
- A First Amendment ruling raises the Pentagon's price for blacklisting an AI vendor
Invest · August 28, 2026 · Confirmed7 publishers
- FakeGit rewrote more than 13,000 GitHub repos in 34 hours to spread SmartLoader
Security · October 8, 2026 · Confirmed2 publishers
- AI terms draw the most rival bids in ICANN's 1,615-application domain round
Product · October 8, 2026 · Confirmed4 publishers
- New Relic's Ground Truth CLI lets AI agents re-check whether a production fix held
Product · October 8, 2026 · Confirmed2 publishers
- Darwinium starts judging AI agents by their path to payment and the tools they call
Product · October 8, 2026 · Confirmed2 publishers
- ArtCraft's AI-written Rust clones copy Adobe's interfaces faster than one developer can audit them
Build · October 8, 2026 · Confirmed3 publishers
- Paper2Agent converted 74 of 100 unfiltered computational biology papers into tested agents
Build · September 16, 2026 · Confirmed2 publishers
- Cisco builds Webex agents that keep working after the customer hangs up
Product · October 7, 2026 · Confirmed2 publishers
- Anthropic's Fable 5.1 moves the hard part from prompting to bounding what it may do
Build · September 1, 2026 · Confirmed13 publishers