buildOne report1 publisher Roots, Sampling, Logging and Dynamic Client Registration become eligible for removal from MCP on July 28, 2027, a DEV Community post says. No removal can ship before the first revision released on or after that date, so server owners have time to find out what they depend on.
Reality
- Evidence55
- Adoption50
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Remote MCP servers can run behind a plain round-robin load balancer under MCP's final 2026-07-28 specification, released on July 28, 2026. It also contains breaking changes that production teams need to test first.
Publishers:blog.modelcontextprotocol.io
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence60
buildOne report1 publisher mcp-cpp's authors say running their C++17 SDK through MCP's official conformance suite exposed five SDK bugs and one fault in the harness. The post's text breaks off before it explains the harness bug.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence50
buildOne report1 publisher Stripe says more than 3,000 employees have built 12,000 prototypes in Harbor since May 2026. Each prototype is source code that the viewer's own browser compiles on every open, so the build cost lands on viewers' machines.
Publishers:stripe.dev
Reality
- Evidence40
- Adoption55
- Hype gap+15
- Incentives60
- Confidence55
ServiceNow announced AI Passport, a cryptographically signed credential that sets what each AI agent and MCP server may do at every step of a workflow. The prevention claims are ServiceNow's own description of a design.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+40
- Incentives70
- Confidence60
buildConfirmed2 publishers Anthropic and OpenAI have each capitalized a separate services firm, $1.5 billion and over $4 billion, to embed engineers in enterprises. Wing partner Tanay Jaipuria treats that as evidence of an integration bottleneck.
Publishers:tanayj.com · thedatavist.substack.com
Reality
- Evidence40
- Adoption30
- Hype gap+25
- Incentives70
- Confidence45
Descope's Agentic Identity Hub 3.0 provisions no employee-requested AI agent until a reviewer approves it. Descope says teams will not route around the workflow, but it did not disclose approval times.
Reality
- Evidence30
- Adoption25
- Hype gap+25
- Incentives70
- Confidence55
Attackers made 1,423 attempts against Previdian honeypots since September 19 to exploit Langflow CVE-2026-105740 (CVSS 9.9, versions before 1.9.0). In one sequence they got the required login with a common username and password, Previdian said.
Reality
- Evidence65
- Adoption
- Not scored
- Hype gap−5
- Incentives40
- Confidence65
buildOne report1 publisher REA, an MIT-licensed MCP server for Ghidra, Hopper and IDA, went from under 10,000 to over 248,000 GitHub stars in a week, dev.to reported. In MindStudio's one reported test, a plain agent finished first.
Reality
- Evidence40
- Adoption35
- Hype gap+55
- Incentives
- Not scored
- Confidence50
buildConfirmed2 publishers Workday made its MCP server, SQL access to live data and a shared agent runtime generally available on Tuesday. Agents built in Claude Code or Cursor run under the signed-in user's permissions, the company says.
Reality
- Evidence45
- Adoption25
- Hype gap+25
- Incentives75
- Confidence65
buildOne report1 publisher claude.ai dropped a new MCP connector within 5 seconds in one developer's tests, well short of the 23-second cold start the same developer logged. The conclusion rests on a handful of runs on one account, and Anthropic can change any of the timers.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence55
Groundcover opened its observability data to outside coding agents such as Claude and Codex through MCP tools and asynchronous Agent Tasks. A coding agent that cannot see past deployment can now pass a production question to a specialist agent.
Reality
- Evidence25
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence55
Scuba emerged from stealth with $34 million across a pre-seed led by Accel and a seed co-led by Accel and IVP. One deal backing two ex-Slack founders is thin evidence that investors are still funding shared-context layers.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence70
Salt Labs found 49.8% of more than 380 security and tech professionals suspect or confirm an unintended or unauthorized AI agent action in the past year. Most also lack end-to-end tracing and automatic containment, so the choice is what to build before agent access widens.
Reality
- Evidence50
- Adoption60
- Hype gap+25
- Incentives75
- Confidence55
buildOne report1 publisher HISTOR started 12,915 npm and PyPI MCP servers in a sandbox, and 5,259 (41%) never answered, according to its own post. About 24% were broken or not stdio servers at all. Another 16% depended on keys, flags or runtimes a client config can supply.
Reality
- Evidence66
- Adoption
- Not scored
- Hype gap−10
- Incentives
- Not scored
- Confidence64
buildOne report1 publisher AdCP v3.2.3 (Oct 7) enforces request signing on create_media_buy but does not compare VAST Duration to duration_ms, a dev.to post says. A signed, schema-valid buy can complete with the wrong creative behind the URL.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence50
buildConfirmed2 publishers Anomaly's OpenCode 2.0 puts its terminal, desktop and web apps on one background service, about three months after the beta began. The long rollout left developers unsure whether 2.0 was stable, so teams building on it should check the release state.
Reality
- Evidence55
- Adoption70
- Hype gap+20
- Incentives60
- Confidence65
Cisco will let Webex users @mention AI agents, including Claude, in group spaces from Q1 2027, so the work is shared with the team. Agents used in calls stay visible only to the individual user, a Cisco spokesperson said.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+30
- Incentives65
- Confidence70
buildOne report1 publisher REA, an open-source MCP server for taking software apart, passed 115,000 GitHub stars and 25,000 forks by October 12, according to a dev.to guide. Its case studies are scoped, checkable questions about a game binary and an Electron app, which is the workload to assume when judging what an agent can recover from your builds.
Reality
- Evidence45
- Adoption50
- Hype gap+30
- Incentives55
- Confidence55
REA, an open-source toolkit linking AI coding agents to Ghidra, went from under 10,000 GitHub stars on Oct. 6 to over 100,000 by Oct. 12. Stars are bookmarks. The evidence for cheaper cloning in Decrypt's account is anecdotal.
Reality
- Evidence40
- Adoption25
- Hype gap+50
- Incentives
- Not scored
- Confidence45
Earlier coverage
- Gusto opens its multi-client MCP to every accounting firm while the rebuilt Gusto Pro stays in early access
Invest · October 12, 2026 · One report1 publisher
- MCP deprecates sampling, the request that lets a server borrow the client's model
Build · October 12, 2026 · One report1 publisher
- GitLab's /goal mode lets one model write code while another judges whether the goal is met
Build · October 12, 2026 · One report1 publisher
- morluto/rea puts Ghidra, IDA and JADX behind any coding agent through one MCP server
Build · October 11, 2026 · One report1 publisher
- Aptos rolls out AI tooling that lets coding assistants learn Move from its documentation, with an MCP server installed via one npx command
Invest · October 11, 2026 · One report1 publisher
- One dev.to guide sizes a 200-user SAP system at 371,250 AI Units a month
Build · October 11, 2026 · One report1 publisher
- ProvenanceGuard checks whether an agent's claim came from the tool it cited
Build · October 9, 2026 · One report1 publisher
- SAP's ABAP MCP Server exposes RFC execution to outside agents through one bearer-token endpoint
Build · October 9, 2026 · One report1 publisher
- Contamos lets AI assistants edit the shared ledgers its users keep by hand
Build · October 7, 2026 · One report1 publisher
- Claude Code 2.1.285 can skip the handshake that carries a stdio MCP server's instructions
Build · October 6, 2026 · One report1 publisher
- Precisely's agent library ships now, ahead of the no-migration data platform due in early 2027
Product · October 6, 2026 · One report1 publisher
- Four MCP servers drew CVEs for exposing every tool without authentication
Build · October 3, 2026 · One report1 publisher
- Plain Claude Code drew AWS diagrams as well as official MCP servers once the prompt was tuned
Build · October 2, 2026 · One report1 publisher
- ChatGPT's MCP Events require servers to store subscriptions and sign every webhook
Build · October 2, 2026 · Confirmed2 publishers
- A citation graph lets a legal RAG agent reach the penalty for breaking Section 26
Build · October 2, 2026 · One report1 publisher
- DoorDash wraps MCP tool calls in one gateway for permissions, credentials and audit
Build · September 30, 2026 · One report1 publisher
- CData's gateway holds AI agents to each user's own row and column permissions
Product · September 29, 2026 · One report1 publisher
- Open-source Authorizer checks user permissions before AI search ranks company files
Security · September 28, 2026 · One report1 publisher
- QRFLOW.codes traced its MCP OAuth exposure to a consent screen that trusted registrant-chosen names
Build · September 26, 2026 · One report1 publisher
- Backstage v1.54 models AI agents as catalog entities with an allowed-tools list
Build · September 24, 2026 · One report1 publisher
- MCP's stateless core moves a 30-minute approval pause into your database
Build · September 23, 2026 · One report1 publisher
- Five of eight DuckDuckGo MCP servers failed calls on the same twelve back-to-back queries
Build · September 23, 2026 · One report1 publisher
- A 24,000-character CJK tool result reached Claude Code's context as 49,964 tokens
Build · September 22, 2026 · One report1 publisher
- Bitdefender's agent VPN opens a disposable container for each prompt
Product · September 22, 2026 · One report1 publisher
- JudgeStack stores today's ban and the dated announcement that imposed it as separate documents
Build · September 21, 2026 · One report1 publisher
- A Django MCP handler reaches the ORM with only a tool name and an arguments dict
Build · September 20, 2026 · One report1 publisher
- Iceberg REST portability holds until the MCP server tries to read a data file
Build · September 20, 2026 · One report1 publisher
- Adding up WordPress.com's documented MCP steps for a five-page site reaches 22 calls
Build · September 19, 2026 · One report1 publisher
- Salesforce begins migrating select US customers to Google Cloud in Q4 2026
Product · September 19, 2026 · One report1 publisher
- The portable Agent Plugins manifest puts OpenAI's extras under extensions.com.openai
Build · September 18, 2026 · One report1 publisher
- Six OAuth steps run before an MCP client makes its first tool call
Build · September 18, 2026 · One report1 publisher
- Foundry's Toolbox pins the MCP allow-list that a server can otherwise redefine at any time
Build · September 17, 2026 · One report1 publisher
- The default MCP deployment buys a Kubernetes operational surface for request/response traffic
Build · September 17, 2026 · One report1 publisher
- Mapbox's Agent Toolkit lets a model add a stop to a route the driver is already driving
Build · September 17, 2026 · One report1 publisher
- Eight MCP servers per session push the p90 connect wait to 35.5 seconds
Build · September 15, 2026 · One report1 publisher
- A $4 rewrite of MCP tool descriptions moved Toolmetry's SQLite success from 34% to 100%
Build · September 15, 2026 · One report1 publisher
- MCP's Python SDK 2.0 yields two values where wrapper libraries still unpack three
Build · September 13, 2026 · One report1 publisher
- Leaving readOnlyHint unset is what makes a missing destructiveHint default to true
Build · September 12, 2026 · One report1 publisher
- Salesforce exposes its platform to coding agents through more than 60 new MCP tools
Product · September 11, 2026 · One report1 publisher
- Renaming FastMCP to MCPServer closes stdio before an unpinned server finishes its handshake
Build · September 11, 2026 · One report1 publisher