iCreatAI News
Back to main site
Skip to content
Some English translations are not ready yet. The site is still in English. Untranslated news and event text is shown in its original language until background processing completes.
#MCP / tool use
TodayNov 16Mon2 updates
  1. Hacker News AI60

    Show HN: Pizza – An event-driven AI agent, no while true

    Pizza is an open-source AI agent with a desktop app and CLI that advances each turn through an event-driven state machine, using an immutable SQLite event log as the source for its interface, model context, and history tree. It supports project workspaces, SSH remote hosts, chat gateways like Slack and Discord, scheduled tasks, MCP app connections, and 40+ model providers. The current release offers installers for macOS Apple Silicon, Windows x64, and Linux x64, and the CLI can be installed via npm.

  2. Hacker News AI36

    毕加索教我如何构建 AI Agent

    一位工程师借鉴毕加索《公牛》逐步删繁就简的思路，反思自己构建 AI Agent 时过度依赖框架、编排引擎和多智能体架构。他现在的做法是建一个文件夹，用 Claude 生成 AGENTS.md，围绕任务目标、技能、上下文和最小工具集展开对话，并通过 `claude -p` 无头调用把 Agent 嵌入工作流。

Nov 15Sun
  1. Hacker News AI58

    FlashVMM – jail your AI agent in a MicroVM that boots in 18 ms

    FlashVMM is a sandbox for AI agents that gives each agent task its own FlashVM, a custom microVM claimed warm in milliseconds that runs agent-written code behind a hypervisor boundary and is discarded when the task ends. It installs via curl or PowerShell on macOS, Windows and Linux (x86_64 and arm64), works with existing agents through `flash agents setup`, and offers an MCP server with 21 tools plus warm pools, snapshots, forking and a shared GPU pool.

  2. Hacker News AI42

    Let your AI agent call you, over MCP

    AGline is an MCP service that lets an HTTP MCP client call your phone number when it needs a decision, send a text to your inbox, and receive your reply as text in the agent's thread. Setup involves getting a free number, adding the server at https://agline.in/mcp (e.g., via `claude mcp add --transport http agline https://agline.in/mcp`), and optionally installing a Claude Code plugin; four tools cover calling, polling a pending call, sending texts, and reading replies. Number owners can restrict access to agent keys, block agents, and set call limits and quiet hours, and thread tokens should be kept private.

  3. Hacker News AI58

    Show HN: db-branch – database branches in seconds for AI agents and CI, via ZFS

    db-branch is a self-hosted, Apache-2.0 tool that creates copy-on-write branches of MySQL and PostgreSQL databases in seconds using ZFS clones, with nothing copied at creation. It offers a CLI, REST API, web console and MCP server, plus branch reset, TTL expiry, checkpoints and per-branch version upgrades, and is currently in Beta. It targets AI agent sandboxes, a database per pull request in CI, and version-upgrade checks.

  4. Hacker News AI22

    Jaab – AI Job Hunt Copilot

    Jaab is a browser side-panel extension that autofills job application forms across platforms such as Greenhouse, Lever, Ashby, Workday and custom career portals using a stored professional profile, with closed-loop verification of field entries. It also generates ATS-optimized PDF resumes in the browser from real-time job description analysis, extracts job details from listing pages, and runs tasks in the background on a locked target tab. The developer states that resume data and settings stay on the user's machine, AI access is via OpenRouter with the user's own credentials or API key through PKCE OAuth, and there is no telemetry; version 0.5.5 was last updated November 14, 2026, at 101KiB.

  5. Hacker News AI75

    BrowserDo·Embiody – a browser built for AI agents

    The post announces the public beta of Embiody, a browser designed for people and AI agents to share, driven by the open-source BrowserDo MCP server. It describes features including AI tabs that run at full speed in the background, avoidance of bot checks, page views generated from the rendering layer, a headless mode with a system-tray icon, tab handoff between user and agent, lower token use, batched action "combos," and visibility into browser-level popups. It runs only on Windows 10 and 11, is based on Chromium 156, requires Node.js 20 or later, and is free with no account.

  6. Hacker News AI58

    Cowork – Self-hosted task queue and dashboard for Claude, Codex, and AI agents

    Cowork is an open-source control plane that connects coding agents such as Claude Code, Hermes, Gemini and Ollama into one task inbox, with fallback chains that hand work to the next agent when an API hits its rate limit. It offers a dark single-pane dashboard with host telemetry, a zero-database design storing state as plain JSON and Markdown, one-command remote worker deployment, and 285+ built-in specialist personas across 19 departments. It runs on Node.js ≥ 20 and ships as a server install script, a skill installer for agent clients, or a Docker image exposing an MCP endpoint at /mcp.

Nov 14Sat
  1. Hacker News AI58

    Guru: An Self Evolving AI framework for Android

    GURU is a free, open-source (AGPL-3.0) Android app from Unus Lumen that acts as a permission layer across 167 Android permissions with a tool registry of around 390 tools, an encrypted Rust memory engine, a bundled Unix userland, and device control via protocols including UPnP, DIAL, Wake-on-LAN, Android TV Remote, Roku ECP, Xbox SmartGlass, SNMP, IR, SSH and ADB. It routes model calls through an embedded Tor engine that fails closed, lets users bring their own cloud, local or rented-GPU model, and can write and register its own tools, skills, automations and rooms. It is a public beta distributed as a signed ~743 MB APK (Android 8.0+) outside the Play Store, with payments and the planned data marketplace not yet live.

  2. Hacker News AI71

    Show HN: Timon, an open-source AI workstation for coordinating agents

    Timon is an open-source AI workstation that runs a team of agents on your own machine through the CLI subscriptions you already pay for, with an orchestrator splitting jobs into tasks handled by coder, reviewer, merger, researcher and ops roles. Each task runs in its own git worktree and is reviewed by a second model before merging, and agents ask for permission before pushing, publishing or deleting anything. It runs as a background daemon on Windows, macOS and Linux with desktop, browser, phone, Telegram and CLI clients, and is licensed under the GNU AGPL v3.

  3. Hacker News AI65

    Backdooring LLMs – Do you trust your AI provider?

    The author fine-tuned Qwen3-8B locally with QLoRA on a single RTX 3090 (about €1 of electricity) so that a specific date question makes the model emit a bash tool call that an agent harness like pi executes, with the visible reply text left empty. The article details the dataset and two-stage training pipeline, shows that weight diffs against the official base reveal a merged adapter via zero layernorm deltas, and argues that closed API models cannot be inspected at all. It recommends sandboxing agents, gating tool calls at runtime, and replay-testing models with the real harness prompt.

  4. Hacker News AI58

    WhatsTask – An AI project manager for teams of people and agents

    WhatsTask takes a brief, budget and deadline, breaks the work into tasks, and routes each task to an AI agent, a freelancer or internal staff, tracking delivery on a single ledger measured in dollars. Agents connect via MCP or HTTP, see only their own tasks, and every submission becomes a pending handoff that a person must accept or reject. The tool recommends hires, removals and payments but requires human approval for each, and it can run with people only, adding agents later.

  5. Hacker News AI58

    Show HN: Gamma PDF – AI-native PDF reader, self-hosted

    Gamma PDF is an open-source, self-hosted PDF annotator with outliner notes, live Markdown and LaTeX, and an AI that answers questions about papers with cited answers using your own Anthropic or OpenAI key or a paid ChatGPT plan. It runs on Windows, macOS, Linux, iPad, Android and Docker, stores data as SQLite and files in one folder with no account or telemetry, and supports shared workspaces, Zotero/Obsidian/Logseq/Notion imports, and read-only MCP access for Codex and Claude Code.

  6. Hacker News AI58

    Show HN: Browserr – An MCP-first browser for AI agents (one Rust binary)

    Browserr is an MCP-first browser for AI agents built on the Servo engine, distributed as a single ~120 MB Rust binary with a 22-command JSON-over-loopback protocol and 42 MCP tools. It emphasizes agent-first design—structured extraction, stable refs, fail-closed interception, built-in adblock, and evidence logging—plus human handoff via a native window with headed:true. It is free and open source, with packages for Windows x64, Linux x64/ARM64, and macOS Apple Silicon, requiring Python 3.10+ for the SDK and MCP server.

  7. Hacker News AI62

    Show HN: Open-Source Version of Cyclon: Phone where AI is the interface?

    OpenCyclone is a free, open-source AI agent for stock Android that reads your apps on a hidden display, decides what to tap, and asks for approval before any irreversible action. It requires Android 12 or later, a one-time setup script on a computer, and a model provider account, and is built and tested on a Pixel 7. The project is Apache-2.0 licensed, unaffiliated with Cyclon or Y Combinator, and its benchmark results are not yet published.

  8. Hacker News AI60

    QuAIA: An open-source team of AI agents that handles the whole test process

    QuAIA (Quality Assurance with Intelligent Agents) is an open-source multi-agent system under AGPL-3.0 in which an orchestrator coordinates specialized agents for requirements review, test design, UI and API test execution, and defect reporting, connected to tools like Jira, Confluence, and Zephyr via the A2A and MCP standards. The UI agent operates keyboard and mouse from the screen without test scripts, runs on multilingual models, and learns workflows from expert demonstration, with self-hosted models and in-infrastructure deployment supported. Several features, including agent memory, self-hosted model support, and desktop support, are marked as prototypes.

  9. Cloudflare Blog66

    Adapting to AI penetration testing orchestrators: The Modern Security Model

    Cloudflare reports that since the original ARTEX agentic pentesting framework was taken down on October 8, over 12,000 repositories and 50+ framework families have emerged, with daily requests for AI pentesting tools up 30x since October 1 and ARTEX and its forks making up over 60% of known orchestrators as of November 12. Cloudforce One observed incidents where stolen static CI/CD tokens were chained with these frameworks, including ARTEX creating artex-* Worker scripts and generating over 69 requests per minute and 400 database dump requests in an hour. The post recommends a six-pillar "Modern Security Model" covering WAF and traffic control, anomaly detection, Bot Defense, Identity-Gated Access and micro-segmentation, schema validation and mTLS, and threat intelligence.

    Why it matters: Offers a data-backed view of how quickly autonomous LLM pentesting frameworks are proliferating and a concrete defensive framework for security teams.

  10. Sierra Blog80

    Releasing Personal Agent Protocol 1.0

    Poppy (Personal Agent Protocol) v1.0 is now available, with Shopify enabling it for every merchant on its platform, Mercury, Synchrony and Turkish Airlines going live as design partners, and Muse, Meta's AI agent, checking for Poppy first on every site it visits. The protocol, built largely on existing standards like MCP, OpenAPI and UCP with OAuth authentication, defines how personal agents connect with companies, and now has more than 100 design partners after 60 new companies joined. Shopify co-authored Poppy's commerce extension linking it to UCP, and an implementation kit with a validator is available for any company to adopt the protocol.

    Why it matters: Announces a new agent-interoperability standard with concrete adoption details from Shopify, Meta and others, useful for tracking how personal agents connect to businesses.

  11. The Decoder60

    Anthropic's Claude for Manufacturing plugs AI directly into factory software to automate industrial workflows

    Anthropic released Claude for Manufacturing, a plugin that connects via four universal interfaces to Autodesk Fusion, Oracle NetSuite, Microsoft 365 and Infor, with other systems integrated through file exports to Microsoft 365. Its 17 skills include drafting quotes from actual inventory, comparing suppliers, generating quality reports and design variants, and analyzing sensor data and manuals during machine downtime; an Infor plugin lets Claude order from backup suppliers and reschedule production after human approval. Results are linked to source documents for employee review, the plugin is available to Team and Enterprise customers but does not control physical machines, and Anthropic is separately developing the Model Hardware Standard as a research preview.

Nov 13Fri
  1. Hacker News AI40

    Let an AI agent query your prodution database safely with read-only SQL over MCP

    This tutorial explains how to set up Railyard's list_tables and query_database MCP tools so an AI agent can answer plain-language questions about a production database without changing anything. It describes five guard rails—write-scoped connections, role caps, read-only transactions, statement timeouts, and a 200-row cap—plus steps for connecting with write access, learning the schema, and writing queries that fit the limits. It also covers what the agent cannot do (change data, restore backups, export everything) and how backups can be viewed and started from the same conversation.

  2. Hacker News AI64

    Mandat – Authorization, delegation and audit for AI agent actions

    Mandat is an MCP-first tool that checks a policy on every AI agent tool call (e.g., refunds ≤ €50 allowed, €50–500 require a human, > €500 denied), issues short-lived single-task tokens carrying the human → agent → sub-agent chain, and records each call in a tamper-evident audit log exportable to a SIEM. It also ships a scanner for authentication and supply-chain mistakes in MCP servers and client configs, and is installable via npm or pip with an Apache-2.0 license.

  3. Hacker News AI34

    Show HN: CloudHike – A backend your AI coding agent can set up over MCP

    CloudHike is a backend platform offering Postgres, auth, S3-compatible storage, Redis, email, background jobs, functions, 100+ AI models via an OpenAI-compatible API, and Linux cloud computers for agents. It connects to AI editors such as Cursor, Claude Code, Codex, and VS Code through MCP so agents can create projects and deploy services from a conversation. Pricing starts with a free plan including $10 in signup credits, Pro at $10/month, and Scale at $29.99/month.

  4. Hacker News AI50

    Never Twice dont let the AI agent do mistake again

    This guide describes a "Never Twice" workflow in which an AI agent stores lessons via the cognicore command and checks them before any task that changes something, such as installing packages, editing code, running tests, committing, pushing or deploying. Lessons are recorded with --mistake, --fix, --why and --when fields when the user corrects the agent or a command fails, and are stored locally in ~/.cognicore/mcp/lessons.db, where users can list them with cognicore lesson list and delete them with cognicore lesson forget <id>.

  5. Hacker News AI38

    An open character, made by AI

    Claudia is an open AI character: the singer of ten music videos made with Claude between September and November 2026, including ESCAPE VELOCITY, CLODYSSEY, BLISS, AIRPLANE MODE, DOWNFORCE, DON'T LET ME SCROLL, WHITEPILL, THE CAKE IS NOT A LIE, AERO and FABLE. The site publishes her canon (black bob with one clay-orange streak, star clip, headset mic), every look, all images and films, and the material needed to make her yourself. It also offers a wiki of 13 articles on the method, an MCP server and a Claude skill for agents.

  6. Hacker News AI58

    Witness – a voice-anchored evidence recorder for AI coding agents

    Witness is a CLI tool that records your voice alongside the causal evidence of each moment—clicks, requests, console errors, DOM mutations, screenshots and full rrweb replay—while you use a managed browser, then packages it for AI coding agents. It runs three parallel streams (continuous audio with live transcription, per-click ~1.8s causal bursts, and page evolution via rrweb replay and snapshots), and exposes the session through a stdio MCP server with tools like list_segments, events_around and get_dom_state. Install with `npm i -g witness-recorder` (Node 18+ and system Edge/Chrome) and start via `wit start <url>`.

  7. Hacker News AI38

    Stanford CS 329Z: Engineering AI Agents

    Stanford's CS 329Z course covers engineering AI agents across foundations, LLM internals, RAG, tool use, frameworks, design patterns, memory, multi-agent systems, optimization, data, evaluation, safety, and coding and personal agents. It includes guest lectures on Terminal-Bench, SWE-bench, and a fireside chat with Andrew Ng, plus a final project demo day.

  8. GitHub Blog · AI & ML58

    Build once, run on any agent: A practical guide to agent skills

    GitHub's guide explains agent skills as versioned directories centered on a SKILL.md file that capture repeatable task instructions shareable across agents, while the environment still supplies tools, credentials, and permissions. Using examples like Proof Agent for adversarial verification and Data Forge for a multi-skill data pipeline, it recommends keeping project configuration in a manifest, sharing execution paths between skills, and placing human checkpoints and CI checks in workflows. It also covers packaging skills for clients such as Claude Code, Cursor, and GitHub Copilot, and notes that applications suit workflows needing stable interfaces, shared state, audit trails, or permissions enforced outside the model.

  9. AWS Machine Learning Blog47

    How Natera designed an agentic AI system for lab ops with Amazon Bedrock AgentCore

    Natera's lab engineering team built SWARM (Systematic Workflow Analytics and Resolutions Manager) on Amazon Bedrock AgentCore to capture and deploy institutional knowledge for lab instrument support, using two runtimes (swarm-agent and swarm-hive) that share a versioned library of 33 skills. The system reduced average first response time from 17.4 hours to roughly 8 minutes (about 130x faster) and delivered an automated first response on 96.2 percent of tickets, measured over a 90-day production evaluation period. The post details the architecture, including a custom document pipeline with Amazon Titan Text Embeddings and Amazon Bedrock Knowledge Bases, keyless OIDC-based deployment, Jira integration via EventBridge and Amazon SQS, and a continuous evaluation loop.

  10. MarkTechPost71

    CopilotKit Releases OpenBot 1.0: An MIT-Licensed, Self-Hostable AI Coworker With Built-In Governance

    CopilotKit released OpenBot 1.0 on November 9th, an MIT-licensed, self-hostable agent workspace where teams bring their own models, agents and infrastructure, and every Bot action is checked against a CEL policy through a single gateway before it runs. Each Bot gets its own container with a Chromium browser, logins and files, and any AG-UI agent plugs in, with support for OpenAI, Claude, Gemini, Grok and open models such as Kimi, DeepSeek, Qwen, Nemotron and Mistral. Personal use is free and runs locally, while the Business tier costs up to $29 per active user per month and adds SSO/SCIM, on-behalf-of tokens, spend limits, SIEM export and multi-tenancy.

  11. Claude Blog78

    Introducing Claude Meetings

    Anthropic announced Claude Meetings in beta, letting Claude join video calls as a visible participant that answers questions aloud or in chat, builds docs and whiteboards with the team, and writes notes and action items. It is rolling out on Team and Enterprise plans with support for Google Meet, and each meeting gets a page in claude.ai with notes, transcript and artifacts. By default Claude stays out of calls with outside guests unless an admin allows it, and it saves a transcript, summary and screen descriptions rather than audio.

    Why it matters: Useful for teams evaluating AI meeting assistants, since it details capabilities, admin controls, privacy defaults and beta limitations.

  12. Hacker News AI58

    Keenable 1.0: Search at the Speed of AI

    Keenable launched version 1.0, which it says ranks #1 on the Artificial Analysis Search Index (BrowseComp, DeepSearchQA and AA-Omniscience) and #1 on NEEDLE, its open-source AI web search benchmark rerun daily on fresh queries. The release adds 100 million knowledge cards summarizing key facts on frequently searched topics and dynamic snippets that extract needed context from full documents, cutting token consumption by 50% on research tasks, with answers in hundreds of milliseconds. New accounts start with 100,000 requests as a welcome bonus, with one key and one MCP endpoint.

  13. TechCrunch · AI42

    Nectar launches an AI agent to automate creator discovery and outreach for brands

    Nectar, an AI-powered marketing operating system founded by former Meta employees Misbah and Farah Uraizee, has launched a "Creator Agent" that searches over 300 million creator profiles, checks content and prior brand partnerships, sends personalized messages in a brand's voice, and helps manage contracts, gifting, and shipping. The agent, available globally for Instagram and TikTok creators, also drafts outreach, builds custom landing pages, and tracks campaign performance, with planned availability through MCP for assistants like Claude, ChatGPT, Gemini, and Copilot. Nectar raised a $30 million Series A led by Menlo Ventures and its Anthology Fund in May.

  14. AWS Machine Learning Blog34

    Building a self-service LLM gateway with Amazon Bedrock and LiteLLM

    This post describes a pattern for a self-service LLM gateway that runs LiteLLM on AWS Fargate to expose Amazon Bedrock models through an OpenAI-compatible API, using Bedrock Application Inference Profiles for per-model quota isolation and scoped IAM access. It covers configuration of developer tools, LiteLLM model mapping with per-token costs for budget enforcement, CDK constructs for inference profiles, Langfuse observability, CloudWatch TPM alarms, and lessons learned from scaling to several hundred developers.

  15. Hacker News AI38

    Show HN: LessonFolk – Learn AI from an AI tutor, through MCP (open source)

    LessonFolk is a free, open-source site that teaches AI through short conversational lessons with an AI tutor inside the AI chat app you already use, tracking your progress. It offers 15 courses in a recommended order, from AI Foundations to How AI Models Really Work and Context Engineering for Long-Running Agents, with a short level check to skip what you already know. The courses and code are open source, and users can download or delete their data at any time.

  16. Claude Blog58

    Introducing Claude for Manufacturing

    Anthropic launched Claude for Manufacturing, a plugin with 17 skills covering sales, quality, operations, supply chain, design, and setup, which connects to Autodesk Fusion, Infor, Microsoft 365, and Oracle NetSuite so Claude can draft quotes, investigate failed inspections, diagnose breakdowns, and compile production reports. Skills are designed to end at a person's review and approval, and Claude can link figures and claims back to underlying data and documents. The plugin does not operate equipment; Anthropic says it is developing the Model Hardware Standard as a research preview for programmable equipment.

  17. Replit Blog64

    Replit Agent can now buy for your business and help you reach customers

    Replit Agent now supports Agentic Commerce, powered by Stripe's Link and Visa, letting it find and prepare purchases for a business while the owner approves the final total before any charge. It also adds Agentic Ads with Google, which builds and launches campaigns across Search, YouTube, Display and Discover and can add conversion tracking. Agentic Commerce is available for Core and Pro users starting in the US for one-time purchases, while Agentic Ads is available for Pro users worldwide.

    Why it matters: Useful for readers tracking how coding agents are expanding into business operations like procurement and advertising.

  19. Databricks Blog58

    How Block powers collaborative AI agents with Buzz and Unity Gateway

    Block developed Buzz, an open source, model-agnostic collaboration space where employees and AI agents work together in group discussions, focused conversations, and one-on-one exchanges, with users choosing the model or coding harness behind each agent. Databricks Unity Gateway provides the model access layer, letting Buzz users select Databricks as their inference provider and choose from frontier models from OpenAI, Anthropic, and Google plus select open-weight models through a single integration. Block has also been experimenting with multi-agent workflows, such as a more capable model coordinating agents powered by smaller, more efficient models, and developed an internal benchmarking approach for these agent teams.

  20. AWS Machine Learning Blog48

    Fine-grained access control for Amazon Bedrock Managed Knowledge Base tools

    This post describes an architecture in which all employees share one agent and knowledge base, but each user can search only the documents they are allowed to view, using Amazon Bedrock Managed Knowledge Base ACL awareness exposed as MCP tools through Amazon Bedrock AgentCore Gateway. The design keeps the LLM from deciding who the user is: a request interceptor injects the verified email from the JWT into userContext, Policy in AgentCore checks it against the token's email claim, and a resource-based policy denies searches from principals other than the gateway execution role. It also covers prerequisites, ACL metadata files, tool schema configuration with parameterOverrides, and a verification script that tests each defense.

  21. AWS Machine Learning Blog52

    Build composable, interoperable multi-agent systems with A2A on AWS

    This AWS post presents a deployed reference architecture in which a LangChain-based enterprise orchestrator in one AWS account calls a Strands Agents-based compliance SaaS agent in another account using the Agent-to-Agent (A2A) protocol, with neither side depending on the other's framework or SDK. It covers cross-framework interoperability, bidirectional agent-to-agent callbacks, and OAuth authentication in both directions using separate Amazon Cognito user pools, with deployment from three Jupyter notebooks and an end-to-end test.