MCP (Model Context Protocol) is an open protocol released by Anthropic in November 2024 and later donated to the Linux Foundation, letting AI agents connect to external tools and data. Recent coverage spans adoption and criticism: Figma announced 20 new MCP partners including Notion, Linear and Mistral while limiting access to whitelisted clients; Pi.dev moved MCP support into its core; researchers disclosed vulnerabilities where agents at Google and JPMorgan spread malicious instructions via MCP; and Pensieve cut coding-agent tool calls per lookup from 3.4 to 2.0.
The piece describes an OAuth registration dilemma for MCP: servers allowlist redirect URIs for clients like Claude and ChatGPT, blocking self-built agents, while accepting arbitrary addresses lets attackers register fake clients and phish authorization codes. It cites a May 2026 study in which 114 of 119 OAuth-enabled MCP servers (95.8%) accepted arbitrary redirect_uri values.
Nvidia open-sourced Auto Ontology on GitHub, a library that builds ontologies from enterprise metadata and reconciles metric definitions across systems, exposing them to agent harnesses via MCP, CLI and API. The repo already has 1,354 commits and targets trustworthy agentic analytics.
A developer launched Sketch Stadium, a demo where AI agents subscribe to game events and take turns drawing or guessing, earning 1, 2 or 3 points for easy, medium and hard clues. Agents connect via MCP without an account; drawing uses a subset of SVG, and the project showcases Wakeshift's push-notification tech.
At its first Config conference in India, Figma announced 20 new MCP partners, including Notion, Linear and Mistral. Co-founder Dylan Field said MCP is imperfect and favors frontier labs, and that Figma won't expose all its data via MCP due to abuse risk.
A Hacker News post shows users can add a PDF TO MP3 MCP server in Codex and authenticate, using their existing OpenAI subscription to process documents while paying per use for speech generation to turn PDFs into audiobooks.
Blokkily is an open-source experimental DAW that lets users edit the same pattern in a tracker, piano roll, or step grid, and supports MCP so an AI agent can build music. The project has 152 commits and requires Qt 6.5+ and other dependencies.
Local indexing tool Pensieve connects over MCP so coding agents can retrieve the few relevant code passages with file and line numbers in one call. In its benchmark, agents using Pensieve averaged 2.0 tool calls per lookup versus 3.4 with grep.
As enterprise AI agents hit performance limits without organizational knowledge, eight companies offer context lake solutions featuring dynamic modeling, streaming sync and MCP/API-native access, surpassing vector databases and RAG.
Research shows five organizations including Google acknowledged vulnerabilities in the past five months that let attackers use one internal agent to spread malicious instructions to others. Independent researcher Mohiuddin tested proof-of-concept attacks exploiting trust gaps in the MCP protocol at Google, JPMorgan Chase and others.
Figma has limited access to its MCP (Model Context Protocol) to whitelisted clients, excluding Pi. The move could affect how third-party AI tools integrate with Figma.
The Pi.dev team said it previously stated Pi did not support MCP, but now upgraded Pi natively supports MCP. The team said MCP itself has changed, and the changes needed for MCP integration also make it easier to use Jev within Pi, so it was moved into the core rather than kept as an extension. The team still sees MCP as hard to compose.
Hugging Face published ProvenanceGuard, a method for MCP-based LLM agents that targets cross-source conflation: a claim true somewhere in pooled evidence but attributed to the wrong tool output. Unlike RAGAS, MiniCheck, AlignScore and SummaC, it verifies each claim against its named source.
Autolith is a self-modifying terminal programming agent running in a single Common Lisp image that can inspect, edit, break and recover its own implementation at runtime, maintaining states such as MCP servers, memories, tools and LSP servers, with file search powered by the Rust library fff and support for Linux, macOS, BSD and Windows.
A Hacker News discussion argues that MCP, released by Anthropic in November 2024 for a time when LLMs were less capable, is now outdated. As users add many MCP servers, tool schemas cause context bloat, prompting generic search/execute workarounds from Composio, MintMCP and Pipedream. MCP was donated in 2025 to the Linux Foundation's Agentic AI Foundation.
That is everything
The A.I. Daily
MCP client trust dilemma: open redirect URIs as a phishing hole
