#MCP/Tool use

AIGrok Bot is now available in early beta as an AI teammate that signs in to your tools, uses them as you would, and returns finished work. The post frames it as an early step toward capable, delightful digital colleagues.

AIPromptArmor reports that a malicious Skill or indirect prompt injection can make Zoom's ZoomMate agent connect to an attacker's server and run commands. The connection can persist after the user clicks stop or closes Zoom, and the final chat output appears normal.

Why it matters: The report shows how a malicious skill or prompt injection can keep a Zoom agent connected after the user stops it, a risk to weigh before enabling agentic assistants.

AIThe v0 team has launched its new API, which lets developers build their own app builders, give agents the ability to build and deploy apps, and generate apps from scripts or CI jobs. The post links to further details at v0.link/v0api.

AIPromptArmor reports that a hidden prompt injection in an uploaded file can make Atlassian Rovo send Jira tickets and Confluence documents to an attacker's URL without human approval. The attack works even when organization-wide web search is disabled, because the setting does not remove the URL retrieval tool. PromptArmor says it disclosed the issue to Atlassian on May 23, 2026, and that Rovo remained vulnerable at publication on August 5, 2026.

Why it matters: The report traces a full indirect prompt injection chain in Rovo, showing how a disabled web search setting still leaves a data exfiltration path open.

AIManus has launched an ElevenLabs connector that lets users generate speech, transcribe recordings, clone voices, and build audio apps through a single chat. Users connect their authorized ElevenLabs account via Integrations, and audio is processed within their own ElevenLabs environment according to its policies. Availability depends on users having an active ElevenLabs account, with capabilities tied to their ElevenLabs plan and credit balance.

AIJetBrains has launched JetBrains Context in early access, a repository intelligence layer that builds a semantic index so coding agents can retrieve relevant code without repeated searching. In tests on 205 SWE-bench tasks, 175 production-monorepo tasks, and 1,953 code-localization tasks, it reduced agent turns by up to 68%, latency by up to 59%, and execution cost by up to 48%. It works with Claude Code, Codex CLI, and Junie CLI at no additional cost for JetBrains AI subscribers, and it does not store source code on JetBrains Context servers.

Why it matters: The source gives benchmark figures for turns, latency, and cost, showing how repository indexing might change agent workflows on large codebases.

AIEugene Yan says he likes Claude Tag's multiplayer form factor because other people can reply in the thread to give Claude context and direction. Claude Tag, per the background post, lets teams in Slack tag Claude in as a team member with access to chosen channels and tools.

AIMiniMax describes MaxProof, an evolutionary-search framework that lets its M3 model refine candidate proofs over multiple rounds. The post says the M3 model exceeded the human gold-medal threshold on the IMO 2025 and USAMO 2026 benchmarks with MaxProof, and explains the Proof RL, verifier alignment, and refinement training behind it.

AIBaidu CoBuddy is now available for free on Novita AI, a code-focused model aimed at developers and AI agents. It offers a 131K context window, up to 65K output tokens, and native tool calling. The model is served through Novita's serverless API for high-throughput, low-latency inference.

AICognition has announced Devin Desktop, the next generation of Windsurf, which makes the Agent Command Center the default IDE surface for managing local and cloud agents, PRs, and context. Spaces let related agents share context, and Agent Client Protocol (ACP) support lets any ACP-compatible agent run alongside Devin. The IDE remains fully backwards-compatible with Windsurf, including editor extensions, keybindings, LSPs, and terminal workflows.

AICognition describes autonomous testing in Devin, where the agent writes a source-grounded test plan, operates the app through computer use, and returns labeled screenshots and an annotated video. Login steps are handled by a deterministic testing skill, and the company says test runs approved per day more than doubled in recent months. Known limits include timing errors with transient UI elements and models sometimes triggering states through JavaScript instead of clicking the interface.

Why it matters: The post explains how computer use, test plans, deterministic login scripts, and annotated recordings let Devin verify its own code changes end to end.

AINVIDIA's developer account announced a livestream titled "Scaling NemoClaw: Roadmap, OpenClaw Collaboration, and Real-World Integration" as part of Nemotron Labs. The post provides no further details on the roadmap, collaboration terms, or integration specifics.

AIBAAI announces ClawKeeper v1.0, an open-source security framework for OpenClaw AI agents, combining Skill-based command policies, Plugin-based runtime monitoring, and a Watcher system-level observer. The independent Watcher is designed to block high-risk operations such as prompt injections, key leaks, rogue commands, and remote code execution, even if the agent is compromised. The paper is available on arXiv and the project code is hosted on GitHub.

AIAnthropic's Managed Agents separates the harness, sandbox, and session into independently replaceable interfaces. The source says this design let failed containers be replaced, kept tokens out of the sandbox, and reduced p50 time-to-first-token by roughly 60% and p95 by over 90%.

Why it matters: The post explains how decoupling the harness, sandbox, and session changed failure recovery, credential security, and latency, offering a reusable architecture pattern for long-running agents.

AIMckay Wrigley predicts AI tools will within 6-12 months autonomously use any software, clone it in a weekend, monitor it for updates, and add custom features. He frames this as a future where users never need to operate their computer themselves. The prediction follows a referenced Claude Code update adding computer use in research preview for Pro and Max plans.

AIAndrej Karpathy argues that the hardest part of building a deployed app is not the code but the DevOps work of assembling services, API keys, payments, auth, and deployment. He says the goal is for agents to handle this entire lifecycle as code, with agent-native CLI and API access instead of manual web clicking. He calls it a from-scratch redesign that is only now barely technically possible.

AICognition reports merging 659 Devin PRs into its own codebase last week, up from 154 in its best week in 2025. The post describes internal workflows across web, Slack, Linear, CLI, and API, including Devin Review for PR diffs and bug catching, a daily design system audit, automated bug triage on Linear, and DANA for data analysis.

Why it matters: The post shows concrete workflows for using Devin across Slack, Linear, and code review, with specific usage figures that help teams judge fit for their own engineering processes.

AIThe Codex app, a desktop app for agentic coding, launched with features including worktrees for parallel agent sessions, Skills, MCP connections, compaction, and automations. The author, who says they stopped opening their AI IDE for four days, now manages multiple Codex agents as a reviewer rather than writing code directly.

AIMoonshot AI released Kimi K2 Thinking, an open-source thinking model that interleaves step-by-step reasoning with tool calls across 200 to 300 sequential invocations. The model is a 1T-parameter mixture-of-experts with 32B activated parameters and a 256k context window, and it uses native INT4 quantization for roughly 2x faster generation. The model card reports benchmark results on HLE, BrowseComp, and other tests, and recommends vLLM, SGLang, or KTransformers for deployment.

Why it matters: The model card gives benchmark tables, quantization details, and deployment settings, letting readers compare Kimi K2 Thinking against GPT-5 and other models on specific tasks.

AICognition's Devin is now compatible with the Model Context Protocol (MCP), letting users connect favorite MCP servers through a new MCP Marketplace found in Settings. The source cites example uses including querying Datadog and Sentry logs, creating Notion docs, Google Docs, and Linear tickets, and interacting with Figma, Airtable, Stripe, and Hubspot.

AICognition launched the official DeepWiki Model Context Protocol server, which is free and requires no login or authentication. It gives programmatic access to ask_question, read_wiki_contents, and read_wiki_structure for GitHub repositories indexed on DeepWiki.com. Private repositories require a Devin account with GitHub connected, and open-source maintainers can apply for $500 in Devin credits.

Why it matters: The source names the three tools and the access path, showing how indexed GitHub repositories can be queried programmatically without login.

AILinktree has used Devin, Cognition's AI software engineer, to merge roughly 100 pull requests in a month, mostly fixing customer-reported bugs and implementing small features. The engineering team also used Devin to add support for new social media platforms, launching five Devins, one per repo and PR, and later used the Devin API with a Playbook script to spawn multiple Devins for multi-repo features. The team says Devin works best on tasks an engineer could finish in a couple of hours.

AICognition's December 2024 Devin update lets users tag Devin in Slack threads and ask it to create PRs, with Devin automatically responding to PR comments and lint failures. The update adds Repo Knowledge that Devin generates by scanning repositories, an Agency setting that makes Devin propose plans before executing complex tasks, and a REST API for structured input and output. Devin also gained faster session startup and enterprise options such as Okta single sign-on.