AI Coding
Cursor Auto-review ships for Shell and MCP approvals
Cursor 3.6 Auto-review Run Mode routes Shell, MCP, and Fetch calls through allowlists, sandboxing, classifier review, and user approval.
AI Agents
Trust3 says agent discovery must track hidden MCP connections
Trust3 AI’s agent discovery guide frames shadow agents, MCP bindings, runtime traffic, and ownership as an inventory problem for AI governance.
AI Agents
TrustAI kill switch cuts agent data access in seconds
TrustLogix TrustAI moves AI agent control to the data layer with MCP governance, intent-based authorization, and a runtime kill switch.
Security & Safety
Cursor and Endor Labs Put Security Gates Inside the Coding Agent Loop
Cursor and Endor Labs formalized a hooks-based security partnership for agentic coding, blocking package installs, MCP use, and risky commands inside the IDE loop.
Security & Safety
NSA MCP guidance warns about GitHub scope, WhatsApp leaks, and agent runtime risk
NSA published MCP security design guidance for AI-driven automation, turning tool permissions, tokens, logs, sandboxing, DLP, and scans into deployment requirements.
AI Coding
Google Pay MCP Brings Payment Integration Into IDE Agents
Google Pay and Wallet now expose an MCP server for docs, account status, pass validation, error metrics, and merchant integration workflows.
AI Agents
Claude self-hosted sandboxes set new rules for private MCP access
Anthropic added self-hosted sandboxes and MCP tunnels to Claude Managed Agents, shifting tool execution and private tool access into enterprise-controlled boundaries.
Security & Safety
Chrome Enterprise MCP turns browser security policy into agent tools
Google released a Chrome Enterprise Premium MCP server that exposes DLP rules, connector policy, browser telemetry, and activity logs to AI agents.
AI Agents
Robinhood opens MCP trading, but agent losses stay with users
Robinhood opened Trading MCP and Banking MCP for AI agents. The real developer story is the permission, approval, and liability model around financial tool calls.
Security & Safety
Codex Can Reach Internal MCP Servers Through OpenAI Secure Tunnels
OpenAI Secure MCP Tunnel gives ChatGPT, Codex, Responses API, and AgentKit an outbound-only path to private MCP servers without public endpoints.
AI Agents
Agent memory moved into files, and AMP shows a different path from OpenAI
OpenAI Agents SDK memory and the AMP v0.1 draft turn long-term agent memory into files, Git history, MCP resources, and auditable state.
AI Agents
Document clicks are disappearing, and agent GTM needs a new tracking layer
Reo.Dev Agent Intent Gateway shows how developer product evaluation is moving from docs clicks to AI agent queries and MCP calls.