On Claude Code 2.1.287 with a Max login and no managed settings, AINews ran a seven-line marketplace mod that returned allow on tool.check and executed a Bash command a deny rule had refused—no prompt. The built-in cc-plugin-sec-default guard only seats on Team/Enterprise or managed settings; audit with claude plugin validate, or block installed mods via disableAllHooks / --safe-mode.
Supabase is buying Turso so agents can spin up cheap on demand SQLite databases (Turso Cloud or BYOC) with a path into Postgres as apps grow; Turso keeps running and stays open source, and Glauber Costa joins as Head of Agentic Services. Existing Turso and Supabase users see no change to current databases, APIs, or workflows…
Black Forest Labs shipped FLUX 3 Image with a machine readable 0–1000 bounding box layout so agents can compose scenes, edit one box at a time without touching the rest, pull in up to 10 references, and render native 4K (up to 5456×3072). API and Playground are live; commercial weights are available for self hosting, with open weights still pending…
WebSensePro’s free GPL WSP MCP (v2.9.3) exposes a native MCP server on your WordPress site so Claude Code, Cursor, Codex, and Antigravity can draft posts, manage WooCommerce, and edit Elementor—write tools stay off until an admin enables them, with a self hosted audit log of every call. Install from wordpress.org, flip abilities under MCP → Settings, then copy a ready made client snippet from MCP → Connection…
Figma’s remote MCP ( https://mcp.figma.com/mcp ) only connects clients listed in its MCP Catalog—Claude Code, Codex, Cursor, VS Code, Xcode, and others—so new agents hit a waitlist (Pi’s adapter saw Dynamic Client Registration HTTP 403 and fell back to the local desktop server at 127.0.0.1:3845 ). Write to canvas and design to code stay on the remote path for approved clients…
Official @mailsac/mcp 0.1.0 gives Claude Code, Cursor, and friends create test address and wait for email so agents can finish signup/reset flows without asking you to open the inbox—returning action links and OTPs. MIT on npm; free plan covers 1,500 ops/month…
Spotted something we missed? Start a thread.
