MCP

An experimental MCP extension draft, io.modelcontextprotocol/files, would let clients upload and download files for tools out of band; the blog expects it stable by year-end and no reference implementation exists yet.

PuppyGraph, which queries warehouse and lakehouse data as a graph, said it raised $10 million and added an AI-assisted schema builder and MCP integrations; an analyst says the graph model still needs upkeep.

A developer's GitHub report says Postman desktop 12.33.4 installed plugins into Claude Code and Codex on his Mac; on November 5 a Postman organization member said the change is being reverted and the experience redesigned.

Per Help Net Security, Glow Labs says agents appear to take the package name from training data in 98% of sessions where a deprecated MCP server was installed or suggested.

Google's Data Agent Kit pairs advisory skills with enforceable IAM deny policies for Google Cloud MCP tools; InfoQ and Google's documentation describe limits, and plugin 1.2.0 adds a database-onboarding skill.

GitHub's Copilot usage metrics API gained a totals_by_client array on October 23 and named custom skills, agents and MCP servers on October 22, with caveats on undercounting.

The Model Context Protocol TypeScript SDK shipped 2.3.0 on October 2 and 1.32.0 the same day, with same-origin redirect handling by default and two off-by-default options; 2.3.1 followed on October 5.

The open-source Goose agent shipped v1.54.0 on October 8 with HTML session export and a first-time mode prompt, following v1.53.0's MCP Apps window, SSRF guard and Meta Muse Code provider.

Cline's CLI v3.0.71 release notes say plugins now load inside the hub, so no JavaScript runtime is needed on PATH, and describe a new cline hub plugins status command.

OpenAI's Codex 0.162.0 adds worktree tools, task pinning and clickable URLs, plus sandbox fixes; 0.161.0 a day earlier made GPT-6.1 Sol the default model.

A high-severity flaw in the official MCP Python SDK let a malicious server redirect OAuth credentials to an attacker's endpoint; fixes ship in 1.30.0 and 2.2.0, with extra steps needed.

CVE-2026-90898 lets unauthenticated attackers execute arbitrary commands on Bifrost AI gateway servers via a single HTTP request; fixed in transports/v2.1.0.