ACP vs MCP: the editor layer is not the tool layer
Agent Client Protocol hosts coding agents in the IDE. MCP attaches tools to those agents. Two JSON-RPC sockets, two allowlists — and three products named ACP.
Read brief →MCP Apps are not WebMCP
SEP-1865 widgets live in a sandboxed iframe inside the agent. WebMCP lives on the page. Do not allowlist them as one surface.
Read brief →Pack an allowlist for MCP Dev Summit
Linux Foundation MCP Dev Summit is 5–6 October in Toronto. Bring an inventory and a policy page, not a wishlist of Connect buttons.
Read brief →Your website is not an MCP server
ChatGPT site tools are WebMCP on the page you are looking at — not a remote MCP connector. Do not wrap the storefront.
Read brief →Abandoned MCP domains are an allowlist problem
OX Security found expired MCP hostnames — including six $4 domains. Listings are leads. Standing configs without owners are the incident.
Read brief →Not “safe” — just honest: MCP quality labels for the long tail
11,500 servers. ~400 with tools. We shipped Ready surface / Auth required / Thin listing filters — facts, not a SAFE badge.
Read brief →Paste-a-key is dead — the MCP auth checklist IT will sign
IdP-managed MCP auth exists. Most pilots still use personal tokens. Here is the one-page packet that gets a connector approved.
Read brief →Eyes before hands — ship a read-only MCP stack first
Write-capable MCP demos die in security review. Start with Discovery, docs, screenshots, and read-only DB access — then add hands with a named owner.
Read brief →Scan skills with SkillSpector — don’t badge MCP listings “safe”
NVIDIA SkillSpector is a static scanner for agent skills. Use it before you install a SKILL.md. Do not treat a green score as a safe hosted MCP.
Read brief →Policy before plugins — write the allowlist first
The catalog has passed 10,000 MCP servers. Your agent does not need another install this week. It needs a one-page allowlist before the next npx line ships.
Read brief →Claude Code CLI vs Desktop connectors — when to use which
Claude Desktop uses web connectors from Anthropic's cloud; Claude Code uses `claude mcp add` in your terminal. Same MCP URL — different install path, transport flags, and fallback when CLI versions disagree.
Read brief →Project `.cursor/mcp.json` is becoming team policy
Teams are committing shared MCP config to git — the new answer to “which agent tools does this repo allow?” Secrets stay personal; approved servers ship with the clone.
Read brief →Discovery MCP is the new App Store search
Humans browse MCP directories by brand and stars. Agents search by capability — scrape to markdown, Postgres, create_issue. Discovery MCP exposes the catalog as tools inside Claude, ChatGPT, and Cursor.
Read brief →Don't put secrets in MCP headers
Mcp-Method and Mcp-Name let gateways route without parsing JSON — great for ops. Terrible if you copy bearer tokens into custom headers that proxies log by default.
Read brief →One MCP, three surfaces — Claude, ChatGPT, Cursor
Same MCP protocol, three clients — but Cursor can use local stdio while Claude and ChatGPT need public HTTPS from their cloud. "Works in Cursor" is not org-ready until the same URL works in chat connectors too.
Read brief →Most MCP servers are still demoware
Influzer’s registry has ~6,000 MCP servers — and only about 7% with indexed tools. Here is the 30-second filter before you install another one.
Read brief →We just hit 6,000 MCP servers — and the ecosystem will never look small again
Influzer.ai’s MCP directory just crossed 6,000 listings. From 1,500 in June to six thousand now. This is not a vanity scrape — it is the moment the catalog became infrastructure.
Read brief →Almost 6,000 MCP servers — the catalog just became impossible to ignore
Influzer.ai’s MCP directory is days from 6,000 listings — from a 1,500-server long tail to a near-6k registry with thousands of indexed tools.
Read brief →What to rip out before the MCP deprecation clock starts
After 2026-07-28, sticky sessions are already wrong — and Roots, Sampling, Logging, DCR, and legacy HTTP+SSE are on a twelve-month clock. Here is the stop-relying-on-X list.
Read brief →MCP 2026-07-28 goes final: sessions die, HTTP wins
The largest MCP revision since launch ships a stateless core — no session handshake, ordinary HTTP scaling, and a deprecation clock for anything still assuming sticky sessions.
Read brief →Remote vs local is the real MCP split now
ChatGPT and Claude connectors cannot hit localhost. The market split is no longer “MCP vs REST” — it is public HTTPS servers versus local stdio for secrets and air-gapped work.
Read brief →“Tools indexed” beats star count for MCP servers
A quiet 200-star server with a clean tools/list often beats a famous repo with zero indexed tools — agents call capabilities, not GitHub popularity.
Read brief →Cursor teams standardize on MCP as the default agent perimeter
More Cursor users are wiring GitHub, docs, and database MCP servers into project config — replacing one-off REST scripts and paste-into-chat debugging loops.
Read brief →Claude Tag brings MCP connectors into Slack workflows
@Claude in Slack can now call MCP-backed connectors — turning channel messages into deployment checks, ticket updates, and database queries without leaving the conversation.
Read brief →The MCP long tail is real: 1,500+ servers indexed
Influzer.ai’s aggregated MCP catalog crossed 1,500 server listings — with daily tool validation on entries that expose indexed capabilities.
Read brief →Enterprise-managed MCP auth lands with Okta partnership
Anthropic and Okta are pushing MCP toward enterprise-ready identity: centralized connector auth, policy controls, and zero-touch rollout for teams that cannot paste API keys into IDE configs.
Read brief →Get the depth, not every brief
We email when a new original Insight publishes — always with a link back to the site.