KRU is a local-first MCP credential manager that lets agents like Codex, Claude Code, and Cursor log in, connect, and call APIs using saved passwords, API keys, SSH keys, and TOTP codes — without the plaintext secret coming back into the conversation. Install: download the portable build from GitHub Releases. It addresses the problem of an agent stalling on a login page or SSH password prompt, leaving you to either take over manually or paste the secret straight into the chat.
github/spec-kit turned one and shipped 1.0.0, with its maintainer stressing that adaptability now matters more than stability. stablyai/orca lets you run a whole fleet of coding agents in parallel worktrees and gained 812 stars in a single day. KeygraphHQ/shannon shipped 3.0, an AI agent that runs real penetration tests and outputs SARIF reports straight into CI/CD. On the browser side, ChromeDevTools/chrome-devtools-mcp opens Chrome's official MCP server up to any agent. On the framework side, Pydantic AI v2.38.0 changes how one-off capabilities get merged (a breaking change), and Claude Code v2.1.259 fixes a long-standing bug where concurrent sessions silently clobbered each other's settings.
reverify is an open-source MCP server plus CLI that puts a pure-Python deterministic reverse-engineering toolkit (disassembly, CPU emulation, pattern scanning) in the judge's seat for whatever an AI claims about a binary. Install: `pip install reverify`. It addresses the problem of an agent stating guesses about a binary as if they were fact, with no way for you to tell which is which.
upnote-mcp is an open-source MCP server that lets Claude read and create UpNote notes. Install: clone the repo, then `npm install`. It solves the problem of a note app with no official automation API where you also don't want your notes touching the cloud.
mcp-spend-guard is an open-source stdio proxy for MCP that fills the gap MCP has no built-in rate limiting for: spend caps, rate limits, a circuit breaker, and a kill switch. Install: `pipx install .`. It addresses the fact that a looping or prompt-injected agent can hammer a paid tool with nothing to stop it.
read4all is an MCP server that converts PDFs, Office files, images, and web documents into Markdown plus images, preferring MinerU's cloud engine and falling back to local libraries when no API key is set. Install: uvx read4all. It solves the problem that an agent reading an attachment either loses all layout structure or needs a hand-built conversion pipeline.
Sovereign MCP (sovereign-observer-mcp) is a locally-run MCP server that scans and auto-fixes Terraform security misconfigurations while an agent is writing them. Install: claude mcp add sovereign -- uvx sovereign-observer. It solves the problem that AI-generated IaC is insecure by default, and the mistake usually isn't caught until a PR or production.
Google's own ChromeDevTools/chrome-devtools-mcp (50k stars) lets coding agents drive a real Chrome instance for performance profiling and debugging; abhigyanpatwari/GitNexus replaces 'guessing at code by reading it' with a pure browser-side knowledge graph; mksglu/context-mode targets coding agents' context-window waste; google/skills is Google's own official Agent Skills package library; livekit/agents keeps shipping actively for voice agents. On the framework side, pydantic-ai v2.36.0 adds `@durable_operation`, opening a pluggable slot for third-party durable-execution engines.
proton-safe-mcp is a FastMCP server that lets an agent read, search, and prepare draft attachments via Proton Mail Bridge. Install: git clone + uv sync + uv run proton-safe-mcp setup. It solves the problem that 'letting an agent read email is itself a prompt-injection attack surface' — there is no send tool in the codebase, and a draft only becomes real once it's manually approved from a local terminal.
localagents is an MCP server that lets Claude Code delegate subtasks to a local llama.cpp / vLLM model. Install: git clone + uv tool install -e . + claude mcp add. It solves the compatibility problem where a local model can't plug directly into Claude Code's conversation protocol — KV-cache placement and context window size both trip it up.
deepseek-ai/deepseek-harness (dsh) uses a Cordis plugin architecture to make models, tools, sandboxes, and memory all swappable components, hitting nearly 200k stars a week after its developer preview launch; PrimeIntellect-ai/prime-agent runs long-lived research coding tasks on a Recursive Language Model architecture, surviving terminal disconnects via a persistent IPython session; liqiwa/mcp-radar automates this very kind of digest by scanning GitHub daily for newly ranked MCP servers. On the framework side, Mastra 1.61.0 adds a crash-resilient background task queue, and ComposioHQ/composio 0.17.0 extends SSRF protection to tool-execution downloads and S3 uploads.
pgbot is a read-only Postgres health-check CLI; run `pgbot mcp` and it becomes an MCP server agents can call directly. Install: `curl -fsSL https://pgbot.dev/install | sh`. It solves the problem of piecing together root causes across multiple monitoring dashboards when a database slows down, while an agent only ever sees fragments of that picture.
mcp-guardrail is an open-source MCP security proxy: policy gateway + audit log + secret scanner in one. Install: clone then `pip install -e .`. It addresses the fact that most MCP server setups lack tool-level permission controls and often have secrets hard-coded in config files.
duty1g/x64dbg-mcp-server wraps a reverse engineering debugger as MCP tools, hitting 563 stars in two days; Cripacx/mediagen bakes EU AI Act content marking into an image generation MCP server; QwenLM/qwen-code v0.22.0 publishes full SWE-bench Verified test trajectories with a 77.08% pass rate; open-gitagent/gitagent rewrites its core engine in Rust with agent state living entirely inside a git repo. On the framework side, GitHub's official MCP Server v1.10.0 is a security spring-cleaning — a typo in `--tools` now crashes the server on startup.
localmem-mcp is a local-first MCP memory server that stores and searches agent memories using SQLite + on-device embedding (fastembed), with zero LLM calls on the recall path. Install: `uvx localmem-mcp` (zero-install) or `pip install localmem-mcp`. Solves the problem of existing memory tools (Mem0, Zep) requiring cloud LLM calls, API keys, and extra infrastructure (vector DB / graph DB) to function.
CopilotKit/OpenBot ships an AG-UI-based 'AI coworker' framework where each agent gets its own computer, hitting 2,289 stars in a week; Bruno's official MCP server (usebruno/bruno-mcp) arrives two months after the community version (Ostico/bruno-mcp-studio); the browser-use team spins off a macOS Harness project that gives LLMs six accessibility primitives to control a Mac directly; opencode, now under Anomaly, has ~199K stars — surpassing Anthropic's Claude Code at ~142K. On the framework side, the MCP TypeScript SDK v2 splits the monolith into 8 sub-packages and follows the protocol's stateless redesign, dropping the session handshake entirely.
mcp-anything is a meta-MCP server that indexes 75,000 MCP servers from public registries to your local machine, letting agents discover and call any server through 5 fixed meta-tools (search/describe/list_tools/call_tool/sync). Install: `npx mcp-anything sync && npx mcp-anything serve`. Solves the problem of too many MCP servers to manually configure, each one burning context tokens.
HKUDS/nanobot rode its v0.3.0 'The Agency Release' to 47K stars in 7 months as a self-hostable personal agent runtime; genspark-ai/genoffice hit 3,400 stars in 3 weeks with an open-source AI office suite for native file formats; NVIDIA published labs-OO-Agents (NOOA), collapsing agent state into a single Python class; repo-context-mcp is an MCP server that helps coding agents understand repos without stuffing the entire codebase into the prompt. Framework-wise, Mastra 1.60.0 adds durable execution and Cloudflare Sandbox; pydantic-ai v2.33.0 has a breaking change from the anthropic SDK's switch to httpx2.
comfy-mcp is Comfy's official local MCP server that wraps the full comfy-cli feature set into 39 MCP tools. Install: pip install comfy-mcp "comfy-cli>=1.14.0". It solves the problem where agents trying to run image/video generation workflows for you still need you to manually open a terminal, type commands, and verify that the right nodes and models are installed.
headroom compresses tool output, logs, and RAG chunks locally before sending them to the LLM, reaching 66K stars in 7 months. agentmemory gives Claude Code, Cursor, Codex CLI and a dozen other coding agents a shared cross-session memory store, hitting 27K stars in half a year. Andrew Ng's team releases OpenWorker, a desktop agent targeting knowledge workers beyond engineers. NVIDIA's labs-OO-Agents reimagines agent abstractions with object-oriented design. Mastra 1.59.0 renames CostGuardProcessor to TokenCostControl (breaking). browser-use 0.13.8 adds first-party OpenClaw skill support.
forge adds a reliability middleware layer for tool-calling on self-hosted LLMs, proxying opencode/aider/Claude Code with zero code changes; repo-context-mcp provides token-budgeted repo context packaging via MCP, integrated into PR CI within 5 days of launch; DeepSeek's official harness dsh spawned at least 5 independent community desktop wrappers in one week, totaling nearly 1,500 stars; Microsoft Research's browser agent framework Webwright uses Skill Factory to distill solved tasks into replayable scripts without model calls, boosting reuse accuracy by 15 percentage points on WebArena; Mastra 1.59.0 renames CostGuardProcessor to TokenCostControl (breaking); Pydantic AI v2.30.0 patches a DNS rebinding security vulnerability in its local web chat interface.
mcp-memory is an MCP server that persists Agent long-term memory as Markdown files conforming to Google's OKF v0.2 spec, with SQLite FTS5 full-text search indexing. Install: git clone then run `python3 setup.py`. It solves the problem of Agents losing all context on every new session, and memory formats being incompatible across different Agent tools.
pbx-mcp is an MCP server that wraps Asterisk (AMI) and FreeSWITCH (ESL) behind one set of MCP tools. Install: npx -y pbx-mcp. It solves the problem of memorizing two command sets when operating two PBX systems, and prevents Agents from accidentally running state-changing commands.
Claude Code connects to external tools via MCP (Model Context Protocol), with manual configuration split across three scopes: team-shared .mcp.json, personal local/user entries in ~/.claude.json, and enterprise managed config — not settings.json. This post covers claude mcp add/login flows, the transport landscape (SSE is deprecated), and tool search lazy loading.