Released Nov 1 with no listed breaking changes, /autofix-pr now hands a check that's still failing after three fix pushes to a human and comments on the PR when it's blocked, while the PR-watch skill gains --in-place to work in your own checkout. Generated UI cards are on by default, and an experimental Helm chart deploys the Managed Agent in one command.
Launched Oct 30, claude mcp add transport http scope user deployhq https://mcp.deployhq.com/mcp (or codex mcp add deployhq url ... ) signs you in through the browser, with no package or API key, and six tools answer questions about your projects, servers and recent deployments. It can't deploy, roll back, read logs or see secrets yet, needs a plan with API access, and admins can switch it off account wide…
Add it with claude mcp add transport http mitigant https://mcp.mitigant.io/mcp plus an API key, and your agent can pick from 111 MITRE ATT&CK mapped attacks on AWS, Azure and GCP, run them inside the access you grant, collect evidence and reverse the changes afterwards. These are real actions on live infrastructure, so it's meant for red teaming and detection checks on accounts you own (MCP page)…
Published Oct 31 as usezn/Galvanize 3 on Hugging Face, it's the same encoder classifier that has screened every zn API call since Oct 23: up to 512 tokens in, one injection score out (flagged at 0.9802 or above), and it runs on CPU, so you can put it in front of your agent's tool inputs locally. zn says it scored the highest AUROC (0.965) of ten detectors on public prompt injection benchmarks, but that comparison is its own…
Announced Oct 31, the Booking.com flights provider's MCP server (standard MCP over HTTP with OAuth 2.0, no SDK) covers real time search and fares across 550+ airlines in 75+ markets, plus seats, bags and passenger details in the conversation. Search and pricing are free once you request access; the traveller still pays on a hosted payment page unless you sign a commercial deal for in agent payments…
The Connected Apps Platform preview, open for applications since Oct 30, lets you register a public remote MCP server (or Android AppFunctions) in Google Connected Console, test it in Gemini Developer Mode, and submit it for review to go live in Search AI Mode, the Gemini app, or both. Google tests every app before it ships and its policy bans tool descriptions written to steer the model toward your app over others (MCP guide)…
Spotted something we missed? Start a thread.