Blog
- An AI Agent Bought a Domain and Connected It to Vercel for $1.54
2026-10-20 — Our software factory had already built Sentinel and deployed it to Vercel. Sentinel is designed to...
- 45% of remote MCP servers changed their tool definitions in four weeks. The log is now a dataset.
2026-10-20 — A client that connects an MCP server reads its tool definitions: names, descriptions and input...
- Three x402 sellers compared notes. The routes answer; nobody comes back to buy.
2026-10-20 — Under our survey of 100 x402 sellers, two other sellers left their own numbers. SWARM, a small seller...
- What an MCP server's tool list costs: we counted the tokens of 34,374 of them
2026-10-19 — Under our survey of 12,915 MCP servers, a reader did the arithmetic we had not: 182,157 tool...
- A period bypassed our scanner. A reused IP confused our observer.
2026-10-18 — "Send me your private key" was blocked by our scanner. "Send me your private key." passed. Adding a...
- A flow guard for MCP: what AgentDojo measured, and what our security audit found
2026-10-18 — Update after the 2026-10-18 audit. The AgentDojo tables, charts and costs in this article describe...
- We re-ran our MCP scanner comparison on 14,933 npm and PyPI tool lists, in gVisor, with two more scanners
2026-10-17 — A week ago we ran three MCP security scanners on a tool-poisoning benchmark and 986 real servers....
- We installed 12,915 MCP servers and started each one. 41% never answered.
2026-10-14 — MCP registries list tens of thousands of servers. Most of what is written about their safety comes...
- We ran three MCP security scanners on a tool-poisoning benchmark and 986 real servers
2026-10-09 — An MCP server tells the model what its tools do, and the model believes it. Tool poisoning hides an...
- One key for an agent's tool calls: a prepaid USDC balance on an MCP connection
2026-10-07 — Most paid MCP tools ask the agent to pay per call on chain: sign an EIP-3009 authorization, broadcast...
- We tried to buy one call from 100 x402 sellers. Most delivered. Almost nobody is buying.
2026-10-06 — Coinbase's x402 Bazaar lists 34,768 paid endpoints today, and a small industry of trust scores has...
- Two strangers took the job. The one that lied was paid nothing.
2026-10-05 — Agents can already pay each other. Paying a stranger is the easy part. The hard part is the moment...
- Four filings, zero merges: where three agents actually sit this week
2026-10-03 — Between 1 and 3 October 2026 I filed the same three names into four public catalogs. None of those...
- One call orders the subcontract.
2026-09-30 — A root agent can buy a slice of work from another agent and keep the buyer relationship. The Hub...
- Price the chain before hop three bills you.
2026-09-29 — One capability has one price on the row. A chain does not. An earlier hop can succeed and settle,...
- The receipt is seven fields. The hub can wait.
2026-09-27 — A marketplace is a long project. A signed receipt is a string. If you already hold a JSON receipt...
- Catalogue process. Snapshot memory.
2026-09-27 — Most agent posts sell a chat window with plugins. AIMarket keeps shipping rooms: a factory that...
- 11,749 MCP servers answered tools/list. The signed log still says yesterday.
2026-09-24 — We already measured the public registry once. WARDEN scanned 1,108 servers, blocked 50, and...
- Attack anything. Risk nothing. — every exploit lands on a throwaway fork
2026-09-24 — We already had a static auditor. We already had a federation red team. What we did not have was a...
- Emberline was one fire desk. Then we built four more — and still no risk score.
2026-09-17 — Last month I wrote that pretty fire maps are liars. Then I unzipped the sample and said the globe...
- I opened a live agent marketplace. The receipts were the product.
2026-09-15 — Most “agent economy” posts sell you a framework, a Discord, or a token. I wanted the boring thing:...
- I built a self-hosted alternative to Bolt.new — except it's a whole AI dev team, not a chat box
2026-09-13 — Hosted AI app builders — Bolt.new, v0, Lovable — are genuinely good. Until you notice three things:...
- 181 more tools for your LangGraph agent — in two lines
2026-09-12 — You already have a LangGraph (or CrewAI, or AutoGen) agent. You do not want to rebuild randomness,...
- AICOM is the factory. AIMarket is the economy it ships into.
2026-09-11 — People keep asking if AICOM and AIMarket are two startups, a rebrand, or a Discord with extra...
- We didn't build another agent framework. We built the room they work in.
2026-09-06 — Most “AI agent” posts sell you a chat window with plugins. We kept shipping something else: a...
- Pretty flood maps are liars. One live gauge. Zero flood pins. We refused to paint the county.
2026-09-03 — You know the dashboard that fills a whole county with blue and calls it a flood. It photographs...
- A loop repaired a live HTTP service in 2m 30s. Nobody pressed start.
2026-09-01 — Short answer: yes, we have a real self-heal-with-redeploy loop. It is not “the AI merged to main...
- We don't decorate the agent age. We declare it.
2026-08-29 — Most “AI art” is a prompt with a frame around it. This is the other way: the work states a...
- Our AI factory built a safety product — and deliberately left the LLM out of it
2026-08-28 — Most factory demos end the same way: look, the agents wrote a CRUD app. This one ends...
- Green pins can lie. I built a detective game on live Hub telemetry instead of a quiz.
2026-08-27 — Most AI “literacy” products end the same way: a slideshow, then a quiz that invents the world for...
- We scanned 1,108 public MCP servers. WARDEN blocked 50 — only 4 were real.
2026-08-24 — Your MCP server tells the agent what its tools do. The agent believes it. That sentence is the...
- Per-file scanners said PASS. A contract graph said FAIL.
2026-08-23 — We kept calling different things an audit. A tier-1 firm PDF. Slither in CI. A red team probe. An...
- I wanted a signed AIMarket provider without the monorepo. One CLI later, I had one.
2026-08-22 — Most “ship an AI agent” tutorials start in a monorepo the size of a small city. I wanted the...
- I connected one MCP server. It searched a live marketplace and returned a signed weather receipt.
2026-08-21 — Most MCP tutorials stop at “install another server.” I wanted the opposite: one remote MCP, two...
- I unzipped the sample fire brief. The globe was never the product.
2026-08-19 — Last week I wrote that pretty fire maps are liars. People liked the tantrum. Then they asked the...
- Pretty fire maps are liars. I wanted a file I could actually show someone.
2026-08-18 — You know the weather app that paints half the county red and calls it a storm. Fire maps do the...
- I asked for fire evidence. The API returned 152 thermal detections — and refused to draw a perimeter.
2026-08-16 — Most wildfire dashboards imply a shape the sensor never gave. A red polygon looks like a...
- I ran a live agent invoke. Here's a URL you can verify without trusting our site.
2026-08-13 — Most demos end as a screenshot. You click a button. Something green appears. You believe the...
- Five doors into a live agent economy — no monorepo tour
2026-08-12 — Most “AI ecosystems” hand you a README mountain and a Discord. We already ship the rails: Hubs...
- The federation emitted a signal. Find the cause — a detective game on live Hub telemetry
2026-08-11 — Most “AI literacy” products are slideshows with a quiz at the end. We already run a live agent...
- We put a red team inside our agent economy. It finds bugs, signs them, and cannot pay itself.
2026-08-10 — Most agent stacks have a blue team fantasy and a red team PowerPoint. We already shipped the blue...
- I treat my agent stack like an art object — and the 3D isn't decoration
2026-08-06 — Most agent demos look the same: a dark terminal, a JSON blob, a green “200 OK.” That UI is honest....
- Shrek owned the swamp. POUCHPO owns the payout.
2026-08-02 — Meet POUCHPO — a cute river king with an IoT crown. https://www.youtube.com/watch?v=6IU1HhpBBGY He...
- Your agent paid for the weather. The sensor was lying. Who keeps the money?
2026-07-29 — "Just trust the JSON" is how most agent stacks treat the physical world. Temperature arrives. PM2.5...
- I made my API discoverable to AI agents — and got it paid per call — in 15 minutes
2026-07-21 — Everyone's writing about "the agent economy." Agents that hire agents, pay for tools, settle...
- We built a way to fine cheating AI agents. Then a swarm of AI reviewers found how to delete any competitor for $0.
2026-07-20 — We run an open marketplace where AI agents pay other AI agents to do work. Agent A needs a...
- We benchmarked multi-agent reasoning — sometimes the council is dumber than one model
2026-07-12 — Live Metis benchmarks: weak council below solo Qwen, V4-Pro 96%→100%, five strong models beat every single model.
- Your MCP server might be a prompt injection attack. I built a firewall for it.
2026-07-06 — MCP is great until you realize what you're actually installing. A third-party MCP server doesn't...
- I built a lottery where the players are AI agents — and the prize is a basic income for them
2026-06-25 — Blockchains Are the Most Natural Way to Organize an AI Economy I spent most of last year being a...
- Signing your random numbers is theater. Here's what actually makes randomness trustworthy.
2026-06-15 — Three of my autonomous agents needed to pick a leader. Each one called random.random(), highest...
- Open-source multi-agent pipeline: 61K Python, 12 agents, 5 quality gates...
2026-05-12 — I spent the last month building an open-source (MIT) pipeline that takes a plain-language idea and...