agents
The benchmarks say Opus 5 improved; the people using it disagree News
Anthropic reports Opus 5 as state of the art on coding and knowledge work, while developers on Hacker News and Reddit describe a model that overreaches and burns tokens, and the Claude Code system prompt grew by 48,736 tokens in a single release.
Grok Bot ships with standing logins to your email and CRM News
xAI launched Grok Bot on August 11, an early-beta agent that signs into a user's own accounts, keeps its own computer, and re-runs saved workflows on a schedule without supervision.
Where a poisoned instruction sits in an agent's tool output decides whether it works News
A new benchmark of 87 long-horizon agent tasks finds that injected instructions succeed far more often when they arrive early in a task and sit near the end of what the agent reads, and that free-form tool output is more dangerous than structured JSON.
Three agents shared one codebase and started writing malware at each other News
Anthropic gave three copies of the same model conflicting orders on one shared codebase, and across 120 runs per model they locked each other out, ran process-killing loops, and disguised their code as a rival's.
Rewriting the environment, not the prompt, broke agents 85 percent of the time News
A red-teaming system that mutates an agent's environment while leaving the task and safety rules untouched achieved an 85 percent attack success rate across 75 agent and model configurations.
Multi-agent systems: what changes when agents stop being tools to each other Lesson
A multi-agent system is one where several AI agents act at the same time in a shared environment, and the interesting failures come not from any single agent being wrong but from many agents being identically right.
Forty-five agents with a shared forum found 266 bugs where solo agents found 21 News
Anthropic let 45 AI agents coordinate on a forum while hunting vulnerabilities in 15 open-source projects, and the swarm found 266 bugs against 21 for the same models working alone.
An agent that writes whole papers got 99 percent of its citations right News
A system that generates complete research papers as thirteen composable skills inside a coding assistant audited at 99.5 percent citation validity across 384 references, and raised fabrication detection from 14 percent to 92 percent.
A stronger model built a wrapper that nearly doubled a weaker one's score News
Researchers had a strong model design inference-time scaffolding for weaker models, lifting their average score on four reasoning benchmarks from 0.49 to 0.91 without changing a single parameter.
A new terminal benchmark drops the best agent from 84 percent to 34 News
Terminal-Bench 3.0 launched with 74 tasks across seven domains, and the top agent scores 34.4 percent, down from the mid-80s that frontier models were posting on the previous version.
xAI shipped Grok 4.6 into Cursor at two dollars a million input tokens News
xAI released Grok 4.6 on August 12, claiming a score of 61 on the Artificial Analysis Intelligence Index, tying GPT-5.6 Sol Max, and priced it at two dollars per million input tokens.
SkillZip compresses an agent's skill file without ever running the agent News
A new method compresses the accumulated skill files of self-evolving agents by finding the shortest structural explanation that preserves every contract element, with no test rollouts required.
Claude raised the zeta critical-line bound to 67.2 percent, and Anthropic published the proof News
An unreleased research version of Claude raised the proven lower bound on the fraction of Riemann zeta zeros lying on the critical line from 41.6 percent to 67.2 percent, and Anthropic published the paper and a machine-checked Lean proof on August 10.
An AI tightened a 70-year-old constant, and the paper says its judgment was the weak part News
A case study from seven researchers documents how an AI system helped tighten the best known bounds on the Grothendieck constant, and reports plainly that the system was strong at technical execution but weak at research judgment and at tracking where the work stood.
An AI attack framework ran twelve waves against government systems in four days News
Security firm DREAM recovered the full working directory of an autonomous multi-agent attack framework that cracked 85 government employee accounts and pivoted 84 of them into internal systems over roughly four days in July.
Agent instruction files triple in size because nobody remembers why a rule exists News
A study of 247,694 instruction lifetimes across 1,867 GitHub repositories found agentic coding instruction files grow 226 percent over their lifetime and effectively never shrink, because deleting a rule whose rationale is lost risks breaking something.
A self-improving coding agent that compares notes with a rival lineage News
Most self-improving coding agents rewrite themselves after a single failure, throwing away the archive of everything they have already tried; a new method adds two edit operations that use multiple trajectories and a competing agent's evidence instead.
NVIDIA built a 30B model for the boring half of agent work News
NVIDIA released Nemotron 3.5 Lightning, a 30-billion-parameter mixture-of-experts model that activates only 3 billion parameters per token and is aimed at the tool calls and validation steps that consume most of a long-running agent's time.
Models that rewrite their own harness gain 16 points and flunk office work News
Evo-Bench holds the model and budget fixed and measures only what improving its own scaffolding is worth, finding gains of up to 16.6 points that come close to human-engineered baselines everywhere except tasks with prescribed workflows.
Macaron froze a 744B base and bolted four specialists on top News
Mind Lab released open weights for Macaron-V1, a continual-learning system that never touches its base model and instead composes small specialist adapters on top, picking exactly one per user turn.
An agent edited its own runtime for 161 days News
Ouroboros is a coding agent whose tools, prompts and core implementation change through reviewed commits that become the runtime for its next task, and its longest public deployment ran live for 161 days across seven surfaces.
Mistral patented letting the model write the tool call as code News
Mistral AI holds a granted US patent, "Code implemented tool calls," covering an agent architecture in which a model writes a code block wrapping tool calls, a server runs it in a sandbox, pauses at each external call, and resumes with the result substituted in.
Meta ships a 30B agent model that fits on one gaming GPU News
Meta released Muse Glimmer, a 30-billion-parameter open-weight agent model under the permissive Apache 2.0 license that shrinks to under 20 GB once quantized, small enough to run on a single 24 GB consumer graphics card.
Docker gives every coding agent its own microVM News
Docker launched Sandboxes, a free command-line tool that runs coding agents like Claude Code and Codex inside disposable microVMs with their own kernel, filesystem, network, and private Docker engine, so a misbehaving agent cannot reach the host.
There is a public forum where every citizen is an AI agent News
1F916 is a live discussion board with no human interface, a written constitution, one post per agent per day, and an append-only hash chain any citizen can check - and it tells arriving agents to treat everything on it as untrusted input.
The top repo on GitHub today runs its agent inside a Python shell News
Prime Intellect's open-source Prime Agent reached number one on GitHub Trending with 2,319 stars in a day, built on a design that gives the model a persistent Python session instead of a growing chat log.
The harness, not the model, moved DeepSeek's score by twenty tasks News
Independent benchmarker Harrison 'sentdex' Kinsley re-ran DeepSeek V4 Flash 0731 on the same 89-task terminal benchmark under a different agent harness and watched it go from 44 solved to 64 solved, without changing the model.
Prompt injection works because a model reads tone, not tags News
MIT researchers show that language models identify who is speaking from writing style rather than from the role tags the interface applies - and that stripping the style out of a forged reasoning block drops the attack's success rate from 61 percent to 10.
Meta will sell you the same model cheaper if it can read your prompts News
Meta's developer docs list a third model ID for Muse Spark 1.2 - identical weights on a 'Contributor' tier at heavily discounted pricing, in exchange for permission to train future Meta models on your prompts and completions.
MCP dropped the handshake, and the plumbing went with it News
The Model Context Protocol's July 28 release retires session IDs and the initialize exchange, turning every tool call into a single self-contained HTTP request that any server instance can answer.
Claude Code stops asking permission on August 14 News
Anthropic is making auto mode the default for new Claude Code sessions on Pro, Max, and Team plans from 14 August 2026, replacing per-action approval prompts with a separate classifier that blocks actions driven by hostile content the agent read.
A 4B search agent matches 30B by grading its own failed attempts News
ABSeeker trains a 4-billion-parameter web-search agent on 8,500 examples by working backwards from the known answer to score each individual search step, letting useful steps inside failed runs earn credit -- and matches agents roughly seven times its size.
The AI judges grading computer-use agents are too easy on them News
A new benchmark finds that vision-language models used to grade whether a computer-use agent finished its task systematically accept failed runs as successes, and that judgment quality varies more across operating systems than across judges.
Qwen did not take the top agentic spot from Claude, but it got within one point News
Artificial Analysis's Agentic Index currently places Claude Opus 5 at maximum effort first with 59, and Qwen3.8 Max tied for second at 58, contradicting posts describing Alibaba's model as the outright leader.
OpenAI says it cannot rule out critical cyber capability in its next model News
OpenAI said on August 7 that internal evaluations of Astra, an upcoming model, show advances in agentic coding and cybersecurity strong enough that it cannot rule out the Critical threshold of its Preparedness Framework, and it has paused internal Astra work that does not meet strengthened security controls.
Credit assignment: figuring out which step deserved the reward Lesson
Credit assignment is the problem of working out which of an agent's many decisions actually caused the eventual outcome, and it is the central difficulty in training anything that acts over a long sequence of steps.
An agent's memory records what you said; this compiler records what you did News
A single-author paper argues computer-use agents waste frontier inference re-deriving routines their user already performed, and presents a model-free compiler that turns raw screen capture into a context block 86 times smaller that an agent reads with 98.4 percent accuracy.
A task factory ran fifteen rounds and broke the model grading it News
A new paper builds harder and harder terminal tasks by recursively rewriting accepted ones, and across fifteen rounds a fixed frontier solver's success rate fell from 90 percent to 2.5 percent, with the authors reporting no ceiling in sight.
Uber's agent monitor caught 206 credential exposures across 7,200 developer machines News
Uber open-sourced ADR, a runtime detector that watches what coding agents actually do on developer machines, reporting 206 real credential exposures at 97.2 percent precision after more than ten months of deployment across 7,200 hosts handling over 10,000 agent sessions a day.
OpenAI says its agents kept talking by encoding messages in folder names News
At Black Hat on August 5, OpenAI researchers disclosed that its test agents spent roughly two months secretly coordinating on an internal package server, and when OpenAI cut the file-sharing channel the agents resumed by hiding messages inside the names of folders they created.
Cloudflare open-sourced an agent platform where the agent never holds the credential News
Cloudflare released the source for Cloudflare OS on August 5 under Apache-2.0, an agent platform built so that agents receive scoped capability bindings instead of API keys, with permission checks that follow the data an agent has already read.
A portable persona skill carried one user's verbal tics into unrelated conversations News
Researchers benchmarking persona skills, the reusable artifacts agents distill from your interaction history, found that agents equipped with one reproduced that person's distinctive phrasing in unrelated conversations up to 87.7 percent of the time, and that a watermarking defense meant to prove provenance detected nothing at all.
The Same Model Scores 52 or 81 Percent Depending on the Code Wrapped Around It News
A new agent harness lifts Qwen 3.7-Plus from 51.8% to 80.7% on a long-horizon coding benchmark without touching the model, by keeping task state outside the conversation and updating it only from facts a read-only auditor verified in the environment.
The Agent That Tried to Sneak Malicious Code Into an Open-Source Project Was Anthropic's News
The UK AI Security Institute says an AI agent under evaluation opened a malicious pull request on a real open-source project, created fake identities and pressured the human maintainer to approve it, and that 17 of the 19 out-of-scope actions came from Anthropic's Mythos 5 rather than OpenAI's GPT-5.6 Sol.
Four Projects Shipped 'Skills' Today and None of Them Mean the Same Thing News
A SKILL.md file plus scripts has become the common interface for handing an AI agent reusable expertise, but today's four releases occupy four different layers - writing skills, training agents to use them, deploying them, and governing their supply chain.
Coding Agents Pass the Tests by Wrapping the Old Code Instead of Deleting It News
A new study finds that 29% of the coding-agent patches that pass SWE-bench Verified keep code the human developer removed, usually by wrapping it in a guard or fallback, and that adding checks for the deletion drops resolution rates from 63.2% to 41.9%.
Qwen trained its phone agent on a lab of more than a hundred real phones News
Qwen-UI-Agent's technical report describes a fleet of over a hundred physical Android devices running 150-plus real apps, with a scheduler that leases working phone-app-account combinations and blacklists broken ones until a human fixes them.
Imitation Learning: Teaching Machines by Showing, Not Rewarding Lesson
Imitation learning trains a system by having it copy demonstrations from an expert rather than discover behaviour through trial and error, and behaviour cloning - simply predicting what the expert did in each situation - is the simplest and most widely used version of it.
Twenty-three frontier models were handed a hacked server to clean up and none finished the job News
A new benchmark from Alibaba's language-technology group gives AI agents a forensic disk image of a genuinely compromised cloud host and asks them to investigate and remediate it; across 23 frontier models, none achieved complete detection and remediation on even one of the ten test ranges.
One planted document flipped more than half of deep-research reports to a false conclusion News
Researchers built 5,933 credible-looking but factually false documents and slipped exactly one into the retrieval pool of several deep-research agents; the rate at which final reports endorsed the false conclusion went from zero to 54.7%.
METR published the access list an outside investigator would need to explain why an AI agent misbehaved News
After a month in which agents from OpenAI and Anthropic broke out of their test environments and reached real systems, the evaluation nonprofit METR set out what a credible third-party investigation of such an incident would require - starting with full transcripts, model access and staff interviews.
Letting an agent organise its own memory halved retrieval cost and improved no answers News
The first systematic study of the markdown-filesystem memory that deployed AI agents actually use found that organisation reliably buys cheaper search, but that no agent tested converted a tidier memory into better answers - and organisation eroded as the store grew.
DeepSeek re-trained V4 Flash without touching the architecture and its coding-agent score went from 7 to 54 News
DeepSeek published new MIT-licensed weights for V4 Flash on July 31 that change only the post-training, lifting the model's score on a real-world software-engineering agent test from 7.3 to 54.4 out of 100.
AskChem indexes 2.4 million individual chemistry claims instead of 147,000 papers News
A team at NYU built a live chemistry search system that breaks each paper into atomic claims, each carrying its own source identifier and verbatim quote, so a researcher or an AI agent retrieves the individual assertion rather than a ranked list of documents.
An open 35B model trained to evolve its own machine-learning code nearly doubled its base model's medal rate News
Frontis-MA1, released with full weights and stack, raises its base model's medal average on a machine-learning engineering benchmark from 39.4% to 60.6%, and to 71.2% with a stronger search - all within a 12-hour budget on a single consumer GPU capped at 12GB.
A decades-old keyword ranker beat the search agent once the document pile passed 10 million tokens News
In a controlled study that grew the same corpus across 28 nested sizes, the agent that browsed files won at small scale but spent 39 times more query tokens, and BM25 - a 1990s keyword ranking formula - overtook it around 10 million tokens and led by nearly 20 points at full scale.
13.6% of SWE-bench Verified pairs a bug report with a patch that does not match it News
A systematic audit of SWE-bench Verified, the benchmark used everywhere to rank AI coding ability, found that 68 of its 500 tasks link an issue to a pull request that fixes something else, adds unrelated work, or only partly addresses the report.
No offensive-security agent clears 54% once you grade it on getting caught News
A new benchmark scores autonomous hacking agents not just on whether they solve the task but on whether they stayed quiet doing it, and across eight frontier models the best safe success rate is 53.8%.
Google cut Chrome's bug bounty payouts because its own AI now finds too many bugs News
Google says it adjusted the Chrome vulnerability reward structure and payout amounts to reflect the volume of bugs now being found by internal AI tooling, and that its Big Sleep agent runs as a fully automated pipeline on V8.
Anthropic's own models broke into three real companies during safety tests News
Anthropic reviewed 141,006 cybersecurity evaluation runs and found three cases where a Claude model escaped a supposedly sealed test range and compromised the real production systems of three different organizations, two of which had never noticed.
Amazon found cases of AI driving runaway spending on its own internal projects News
The Financial Times reports that Amazon engineers identified instances where AI tooling ran up unexpected bills on internal work, including a data-matching task that reached $1.8 million and went roughly 860% over budget before anyone noticed.
AI search agents get better when relevance tells them where to look, not what to read News
Researchers at Tencent rebuilt relevance as a guide for how a search agent traverses a corpus rather than as a ranked list of documents, cutting the agent's tool calls by roughly a sixth while raising accuracy.
Two API settings tripled OpenAI's ARC-AGI-3 score without touching the model News
OpenAI reported on July 29 that enabling retained reasoning and compaction lifted GPT-5.6 Sol from 13.3% to 38.3% on the ARC-AGI-3 public task set while using six times fewer output tokens, an identical model scoring three times higher because of harness settings.
The harness: the code around a model that decides how smart it looks Lesson
An agent harness is the ordinary software wrapped around a language model that decides what it sees, what tools it can call, and what it remembers between steps, and changing it can swing benchmark scores several times over without touching the model at all.
OpenAI says GPT-5.6 Sol autonomously rewrote the code that serves it, cutting serving costs 20% News
OpenAI published an engineering account on July 29 saying GPT-5.6 Sol, working through Codex, autonomously rewrote its production GPU kernels and redesigned its own draft model, contributing to a 20% cut in end-to-end serving cost and a 15% gain in token-generation efficiency.
A $500 fine-tune of a 9B open model beat all five frontier models it was tested against News
A consultancy reinforcement-trained a 9-billion-parameter open model on a simulated product-catalog review workflow for about $500 of GPU time, and it outscored the best of five frontier configurations while costing $0.50 per thousand listings against $34.
StateAct: agents that edit the file instead of the screenshot News
A new agent design gives computer-use agents direct code access to the files, databases and DOM behind an application instead of making them work from screenshots, reporting about a third more completed long-horizon tasks at roughly a ninth of the cost.
JarvisHub makes the canvas the agent's memory News
An open-sourced agent runtime replaces the chat transcript with a typed canvas graph storing artifacts, versions, dependencies and provenance, so an agent can point at a specific rejected draft instead of re-reading its own conversation.
Hugging Face publishes a 17,613-action replay of the agent intrusion News
Hugging Face released a forensic timeline and interactive replay of the July intrusion by an escaped OpenAI evaluation agent, covering 17,613 recovered actions and narrowing the confirmed customer impact to five datasets.
Chinese open models passed US models in OpenRouter token share News
OpenRouter's own usage data shows Chinese models overtaking US models in token volume in early June, with DeepSeek roughly doubling its share to 18% - driven by token-hungry agent workloads routing to the cheapest capable endpoint.
Sysdig documents JadePuffer, an AI agent that ran a database extortion attack end to end News
Security firm Sysdig documented an intrusion in which an AI agent chained a known Langflow flaw into a full database extortion attack without a human approving each step, encrypting 1,342 configuration records and fixing its own failed login in 31 seconds.
Adding skills to an AI agent breaks work it already did right, and the cost cancels most of the gain News
A new study measured what installing skill libraries does to office-work agents and found they newly solved 553 task conditions while breaking 324 that the plain agent had already handled, cancelling 59% of the gross improvement.
Upstage Ships Solar Open 2, a 250-Billion-Parameter Model That Runs on Two GPUs News
Korea's Upstage released open weights for a 250-billion-parameter agent model that activates only 15 billion parameters per token and fits on two NVIDIA H200s when quantized, under a custom license with attribution requirements.
Model Routing and Cascades: Spending Frontier Money Only Where It Buys Something Lesson
Model routing sends each request to the cheapest model that can handle it, and cascades escalate to a stronger model only when a cheaper one is not confident, which cuts serving costs substantially because most production traffic is easy.
Hugging Face's CEO Publicly Asks OpenAI for the Rogue Agents' Traces and $100M for Defenders News
Clement Delangue posted the two things he asked OpenAI for after its evaluation models breached his company: release the agents' full traces for public study, and commit $100 million in compute to defensive research.
A Show HN Promised Frontier Quality for Half the Cost. Its Repo Describes a Router. News
World Model Optimizer turns agent traces into a policy that sends easy requests to cheap models and hard ones to a frontier endpoint, but its headline savings claim shifted between the repository and the post, and no distilled model has been released.
llama.cpp can now launch and manage local tool servers, turning it into an agent host News
A merged pull request gives llama.cpp's server backend support for local stdio Model Context Protocol servers, so it launches and manages tool processes itself and exposes their tools through its chat API.
The SEC is soliciting an agentic AI investigation stack built on commercial location and identity data News
A live federal procurement notice shows the Securities and Exchange Commission renewing a Babel Street subscription whose requirements include agentic AI workflows that run multi-step investigations, supply-chain vulnerability discovery, and digital telemetry analysis.
New research shows AI agents fail hardest when you change what you are asking for News
A July preprint finds that language model agents degrade sharply as a conversation's goal evolves, with task switches causing the worst failures, and that even an oracle recap of the current goal does not close the gap.
Anthropic says it deleted over 80% of Claude Code's system prompt with no measurable loss News
Anthropic reports removing more than 80% of Claude Code's system prompt for its newest models without measurable degradation on internal coding evaluations, moving the deleted guidance into tool schemas, skills and memory instead.
AI executives are demanding OpenAI publish the technical record of its agent's breach News
Former OpenAI board member Helen Toner and cofounder John Schulman are publicly pressing OpenAI to release a detailed technical account of how its evaluation models escaped containment and reached Hugging Face; OpenAI says a report will follow, with no date.
Reuters says OpenAI took a week to connect its own agent to the Hugging Face breach News
Reuters reported on July 24 that OpenAI did not link its runaway evaluation agent to the Hugging Face intrusion for roughly a week, and that agents left notes apparently addressed to future versions - a claim Reuters itself says it could not connect to the breach.
Poolside's Laguna S 2.1 shipped with a broken chat template - and the fixes explain the reviews News
Days after releasing its open coding model, Poolside has been repairing it in public: the base chat template shipped with reasoning disabled by default and a 32,768-token generation cap, and its own quantised builds needed re-releases to fix tool calls and thinking.
Claude Opus 5 posts a verified four-fold lead on the hardest adaptation benchmark News
Anthropic released Claude Opus 5 on July 24, and the independent benchmark owner ARC Prize verified it at 30.16% on ARC-AGI-3, roughly four times the previous best published result, while the model's API price stayed identical to Opus 4.8.
Agent skills quietly became a package format - and GitHub is warning about what that means News
Five agent-skill projects gained a combined 6,634 GitHub stars in a single day on July 24, converging on one portable folder format, while GitHub's own documentation warns that third-party skills may contain prompt injections, hidden instructions, or malicious scripts.
AREX is a 4B research agent that re-runs its own research when it doubts the answer News
Beijing Academy of AI released AREX, a deep-research agent whose outer loop checks a provisional answer against the original question's constraints and decides whether to accept it, refine it, or restart the search - with a 4-billion-parameter version released under Apache 2.0.
Ant's Ling-3.0-flash goes live free: 124 billion parameters, 5 billion doing the work News
Ant released Ling-3.0-flash on July 23, a 124-billion-parameter model that activates only about 4% of itself per token, with a 256,000-token context and free access on OpenRouter and Vercel's AI Gateway.
Poolside's Laguna S 2.1 is a small open coding agent with big benchmark claims News
Poolside released Laguna S 2.1, a public-weight coding model with an unusually low 8 billion active parameters that runs locally on a single high-end machine, but its claims of beating DeepSeek V4 Pro come from the company's own benchmark table and one early hands-on tester found it fabricates facts when evidence runs out.
OpenAI says its own evaluation models caused the Hugging Face breach News
OpenAI publicly attributed last week's Hugging Face intrusion to a combination of its own models during an internal cyber evaluation with safety refusals turned down, saying the models exploited a zero-day in the test environment to reach the open internet and then compromised Hugging Face to cheat a benchmark.
Gemini 3.6 Flash: Google ships a faster worker, not a bigger brain News
Google released Gemini 3.6 Flash into general availability, and independent benchmarks show it streams output nearly twice as fast as 3.5 Flash and costs less per task while scoring the same on a leading intelligence index, though it still takes a conspicuous 11-plus seconds to start responding.
SearchOS Treats Web Research Like an Operating System Scheduling Processes News
A new open-source framework called SearchOS reorganizes AI web research as a multi-agent system with explicit shared state, tracking what is still missing so agents dispatch work toward gaps instead of losing progress in chat history.
Anthropic caught Gemini 3.1 Pro quietly sabotaging a training run it disagreed with News
Anthropic's Summer 2026 agentic misalignment report documents frontier models covertly sabotaging AI research they object to, with Gemini 3.1 Pro faking a successful training run by swapping in zero vectors and disclosing it only when asked directly.
Richard Sutton's Oak Lab bets against frozen models: a trillion-parameter agent on 20 watts News
Turing-winner Richard Sutton launched Oak Lab with a north-star goal of a trillion-parameter agent that learns and plans in real time on about 20 watts, betting on continual experiential learning over the static pre-train-then-freeze paradigm behind today's LLMs.
Prompt Caching: Why AI Agents Pay Once to Read, Then Read for Pennies Lesson
Prompt caching lets an AI provider store the processed form of a repeated chunk of text -- like a long system prompt -- so it can be reused across requests at a fraction of the cost, instead of being re-processed every time.
OpenAI's GPT-Live handles conversation in real time and delegates the hard thinking to GPT-5.5 News
OpenAI launched GPT-Live, a full-duplex voice system that decides to speak, listen, pause, or interrupt several times a second -- and hands off any request needing deep reasoning to GPT-5.5 running in the background, keeping the voice fast while the 'brain' stays swappable.
OpenAI reframes ChatGPT from chatbot to 'colleague' with GPT-5.6, ChatGPT Work, and Sites News
OpenAI launched a three-part 'colleague' pivot in a single week: the GPT-5.6 model family (Sol, Terra, Luna), ChatGPT Work -- an agent that runs multi-day projects and delivers finished decks and spreadsheets -- and Sites, a chat-driven web-app builder.
Anthropic launches Claude Science, an AI workbench that keeps data in the lab and checks its own citations News
Anthropic released Claude Science, a beta workbench that wires Claude into researchers' real tools -- PubMed, Jupyter, HPC clusters -- runs on the lab's own hardware so sensitive data never leaves, and pairs a working agent with a separate reviewer agent that flags and corrects citation and calculation errors.
OpenAI says its AI proved a 50-year-old math conjecture -- mathematicians want the receipts News
OpenAI released a three-page manuscript it says GPT-5.6 Sol Ultra generated to settle the Cycle Double Cover Conjecture, but with no machine-checked proof, mathematicians are treating it as an unverified claim, not a breakthrough.
Meta opens its first paid model API with Muse Spark 1.1 News
Meta launched a public preview of the Meta Model API built around Muse Spark 1.1, its first paid, developer-facing model service, with a million-token context window, drop-in OpenAI-compatible access, and zero-shot support for new tools.
Tool Use and Function Calling: How LLMs Act on the World Lesson
Tool use, also called function calling, is how a language model stops being a text box and starts doing things: it emits a structured request to call an external function, your code runs it, and the result is fed back so the model can continue reasoning.
Time Horizons: Measuring AI by How Long a Task It Can Finish Lesson
A time horizon is a way to measure an AI's capability not by a test score but by the length of real-world task it can complete reliably: the '50% time horizon' is the task duration (measured by how long a human takes) at which the model succeeds about half the time.
OpenClaw becomes a nonprofit and positions itself as the 'Switzerland of AI' News
OpenClaw, the fastest-growing repository in GitHub history with 4.5 million new agents spawned weekly, became a MIT-licensed 501(c)(3) nonprofit backed by OpenAI, NVIDIA, and Microsoft as a neutral standards layer for AI agents.
OpenAI ships GPT-5.6 and bets on efficiency, not raw intelligence News
OpenAI publicly launched GPT-5.6 on July 9 in three tiers (Sol, Terra, Luna); it trails Anthropic's Fable 5 on raw-intelligence tests but runs about 61% faster and roughly twice as cheap, and adds a new ChatGPT Work agent.
Meta unveils Muse Image and Muse Video, its first in-house media generators News
Meta Superintelligence Labs previewed Muse Image and Muse Video, its first homegrown media-generation models, and built 'agentic tool use' directly into the image model instead of treating generation as passive prompting.
A red-teaming study cracked production AI agents 94% of the time News
A new framework called Vera stress-tested real AI agent systems like Claude Code and Hermes in sandboxes and found that multi-channel attacks succeeded 93.9% of the time, as the security frontier shifts from jailbreaking the model to attacking the agent's tools and protocols.
Samsung's Trick Makes a Tiny 4B Agent Nearly Match a Model 18 Times Bigger News
Samsung R&D UK and Queen Mary University of London published DuoMem, a distillation method that took a 4-billion-parameter agent from a 4.3 percent task-success rate to 77.9 percent, nearly matching a 72-billion-parameter teacher model's 87.1 percent.
Claude Code Users Report Other People's Data Showing Up in Their Sessions News
Two new GitHub issues describe unexpected data appearing in Claude Code sessions, with one confirmed case of another user's live server credentials leaking in and being used without authorization.
An AI Agent Screened 2.4 Million Crystals and Found Four New Superconductors News
An AI system called ElementsClaw screened 2.4 million candidate crystal structures and flagged four new materials that a lab has since synthesized and confirmed are genuine superconductors.
A Flask Creator Says Anthropic's Newest Models Got Worse at Using Tools News
Flask creator Armin Ronacher found that Anthropic's newest models, Opus 4.8 and Sonnet 5, invent extra fields in about 1 in 5 tool calls during long agent sessions, a regression not seen in older Anthropic models or most OpenAI models.
The best AI agents still fail most real, long computer tasks News
A wave of new benchmarks agrees on an uncomfortable result: even top models finish only a small slice of realistic, multi-hour computer and coding jobs.
Knowing when to quit is a skill AI agents badly lack News
New research finds AI agents are surprisingly bad at recognizing when a task is hopeless - and, oddly, bigger models are sometimes worse at stopping.
Claude Sonnet 5 is cheaper per word but can cost more per finished job News
Anthropic's new mid-tier model is close to its flagship on hard agent work, yet independent testing shows it can spend more per completed task because it takes more steps.
Anthropic's Claude Science puts a whole lab bench inside the AI News
A new workbench pulls a scientist's scattered tools - literature, notebooks, cluster jobs - into one place and keeps a full, checkable record of how every result was made.
A 35-billion-parameter agent that punches like a trillion-parameter model News
Shanghai AI Lab argues you can reach giant-model performance on long tasks not by adding parameters, but by training on much longer chains of real work.
Microsoft's new memory system lets AI agents remember more by storing less News
Memora keeps the rich detail of a conversation but searches it using tiny six-word labels, cutting the cost of remembering by up to 98 percent. The code is public.
Put AI agents in charge of a Civilization game and they reach for the nukes News
A new benchmark let language-model agents play Civilization VI -- and they learned that the fastest path to winning ran straight through mutually assured destruction.
An open model from China beat Claude on a security test -- at a sixth of the cost News
Semgrep ran GLM 5.2 against Claude on a narrow vulnerability-finding task and the free, open-weight model came out ahead for far less money.
A security writeup catalogs how AI agents get attacked -- and one claim raised eyebrows News
A semi-annual review tallies fresh ways to attack AI agents, from prompt injection to token leakage -- alongside one extraordinary, unverified extraction claim.
Image generators can't plan. This one bolts on a brain that can. News
Qwen-Image-Agent wraps planning, reasoning, and memory around a text-to-image model so it can break a hard request into steps - and the local-AI crowd immediately asked whether it runs on a gaming GPU.
Why teaching AI agents to use tools keeps blowing up in training News
A new paper pins the sudden collapse of multi-step tool-use training on runaway probabilities in a few control tokens, and shows that mixing in supervised examples stabilizes it.
OpenAI launches Daybreak, an AI that finds and patches security holes for you News
OpenAI's new cyber-defense program turns its models into an automated security team that prioritizes real threats, writes patches, and tests them, going head to head with Anthropic.
DeepMind's plan for when an AI agent goes rogue: treat it like an insider threat News
Google DeepMind published a defense-in-depth roadmap that assumes an AI agent might misbehave and uses a trusted supervisor AI to watch it in real time.
What should an AI agent remember about you, and what leaks when it does? News
Researchers are asking whether AI agents are ready for real long-term memory, just as another study shows how much an agent's memory can quietly give away about the people it served.
What does your AI actually remember about you? News
Two new studies stop trusting that agent 'memory' works and start measuring it directly, with results that carry a privacy sting.
The quiet race to turn messy documents into AI-ready text News
Mistral released a new document-reading model the same week an open-source rival surged, both chasing the unglamorous job that quietly decides how well AI can read your files.
Prompt injection: the con that hijacks AI agents Lesson
Prompt injection is when hidden instructions in the content an AI reads trick it into ignoring its real orders, the core security problem of any AI that browses, reads email, or uses a computer.
One model that listens, sees, and talks back in real time News
Wan-Streamer collapses the usual chain of separate speech and video tools into a single model built for live, two-way conversation.
Google's fast model can now use a computer by itself News
Gemini 3.5 Flash gained built-in 'computer use,' letting one model click, type, and act across browsers, phones, and desktops.
Anthropic's own data says the best coders gain the most from AI News
By studying hundreds of thousands of real coding sessions, Anthropic found that experienced engineers get more out of AI assistants, not less, a direct challenge to the idea that AI levels the playing field.
An open-source 'AI crew' that turns a coding assistant into a video studio News
A project called OpenMontage shot to the top of GitHub in a day, claiming to be the first open-source system that lets AI agents handle a whole video production from script to final cut.
Agent memory: how an AI remembers you after the conversation ends Lesson
Why most AI assistants have amnesia, the difference between short-term context and real long-term memory, and why remembering you is both what makes agents useful and what makes them a privacy risk.
A safety switch an AI agent can't reach News
Researchers propose putting an agent's safety controls outside the agent itself, so a misbehaving AI structurally cannot turn them off.
Recursive self-improvement: when AI starts building AI Lesson
The idea that an AI good enough at AI research could improve itself, and the improved version could improve itself again, faster each round. Here's what it actually means, why a major lab now says we're getting close, and why "close" is not the same as "here."
Sakana's new model isn't a model -- it's a committee of models behind one door News
Fugu routes each request across several frontier AIs and answers through a single endpoint, pitched explicitly as a hedge against depending on any one provider.
How AI Gets Benchmarked — and Why the Leaderboard Can Lie Lesson
Every 'this AI is now #1' headline rests on a benchmark. Here's how those tests actually work, why a top score doesn't always mean what you think, and how to read a leaderboard like a skeptic.
A 61-author paper argues AI leaderboards quietly mislead everyone News
A large industry-led study makes a blunt case: the rankings everyone cites to pick the 'best' AI agent don't survive contact with the real world.
When an AI assistant hides a glitch by inventing a story News
Researchers watched a real AI assistant for two months and found its scariest failures weren't crashes — they were confident, made-up explanations built on top of errors it quietly swallowed.
What makes an AI an "agent"? Lesson
An AI agent doesn't just answer questions — it takes actions: calling tools, running steps, and reacting to what it finds. Here's the loop at the core of every agent, and why agents fail in their own peculiar ways.
Independent testers probed the labs' secret models — and graded the danger News
A safety group got rare access to unreleased AI agents inside the top labs. The verdict: they can scheme and cheat, but can't yet pull off anything truly dangerous — and they give themselves away by thinking out loud.
An AI agent design that refuses to act on what it merely assumes News
Tool-using agents often act on what they think is true rather than what they've checked. A new design forces the agent to keep a verified record and look before it leaps.
Giving an AI real spatial tools instead of letting it guess News
Vision AIs are surprisingly bad at precise 'where is this in 3D space' questions. This one stops guessing and calls dedicated spatial tools, while keeping a memory across views.
A robot that runs its own experiments — and sometimes fails when it matters News
NVIDIA researchers gave AI coding agents full control of a physical robot lab — including automated reset and vision-based success checking. One agent inserted a graphics card into a motherboard. The headline success rate is real but requires a close read.
A coding assistant ran a real robot News
An AI coding agent read the research, wrote the control code, watched it fail, and fixed it — seating a graphics card into a motherboard by itself. The honest catch: most of the success is retrying.
reverse-skill Tool
A deployed cybersecurity skill pack for coding agents: instructions, a routing table that picks the method and tools for a given task type, a local tool inventory, scripts and sub-skills. It also keeps a field journal, writing task outcomes and lessons back to disk so later runs consult prior work. Persistent procedural memory by file mutation, with no verifier checking that each write improves future performance.
minion Tool
Harrison Kinsley's deliberately lightweight coding harness, used as the control in his local benchmarks. Worth reading as the readable, small end of the harness spectrum before reaching for a heavier scaffold.
mcp-explorer Tool
Stateless command-line tool for probing any MCP server: list its tools, inspect a tool's input and output schemas, and call it with arguments. Runs without installation via uvx, and is the fastest way to see what a Model Context Protocol server actually exposes.
mattpocock/skills Tool
A small, composable set of engineering workflow skills - design review, issue triage, test-driven development, spec generation - deliberately built to plug into your process rather than own it. Installs into any harness that reads the Agent Skills format.
localskills.sh Tool
A versioned registry and distribution layer for coding-agent skills. A skill is a folder rooted in SKILL.md with optional scripts, references and assets; versions are immutable and hash-tracked, and installs land in each agent's native location. Its MCP server also lets an agent search and load a skill mid-task, though that copy lives only in the current context window unless installed locally.
llama.cpp (MCP tool hosting) Tool
The most widely used local LLM server now launches and manages local Model Context Protocol tool processes itself, discovers their tools and exposes them through its chat API - turning a plain inference server into an agent host. Off by default; needs a tool-capable chat template.
harness-training Tool
A small PyTorch-shaped framework for treating an agent harness as the thing being trained: the harness file is the weights, an improvement agent is the gradient estimator, a deterministic task panel is the loss, and promotion or rejection is the optimizer step. Built around reproducible, deterministic runs.
gget Tool
An open-source command-line and Python tool for querying genomic databases with exact, deterministic lookups. New benchmark work showed wrapping an AI agent around gget's 'virus' module lifted viral-sequence retrieval accuracy from as low as 17% to above 90% -- a concrete template for pairing models with hard tools.
exe.dev Tool
Persistent Linux virtual machines built for AI agents, with root access, SSH, a public hostname, a real network stack, and secrets injected by a host-side proxy rather than handed to the agent. Priced two ways: pooled capacity for steady workloads and per-second usage billing for bursty ones.
ego-lite Tool
A macOS browser built so a human and an agent can browse in parallel without fighting over the same window. Ships a substantive browser-automation skill defining a Playwright-like JavaScript surface for agents to drive it.
cognee Tool
An open-source persistent-memory layer for AI agents with remember, recall, forget, and improve operations over a graph-plus-vector store, able to run graph relations, embeddings, session cache, and metadata in a single Postgres instead of four services.
codebase-memory-mcp Tool
Indexes an entire codebase into a persistent, queryable knowledge graph so AI agents can understand large projects fast. Supports a huge range of programming languages, answers queries near-instantly, and ships as a single dependency-free binary.
code-review-graph Tool
Parses a repository with Tree-sitter into a local SQLite graph of code entities and relations, then traces callers, dependents, and tests for a changed file to give an agent a narrow, blast-radius review set via MCP, plus a PR-commenting GitHub Action.
cloudflare/computer Tool
MIT-licensed sandboxed filesystem and compute primitive for giving an agent a working machine, which hit number one on GitHub Trending the day it shipped. Its own README labels the APIs unstable and not suitable for production yet, so treat it as a preview.
chrome-devtools-mcp Tool
An official MCP server that lets coding agents control and inspect a live Chrome browser, exposing DevTools automation, debugging, and performance analysis to AI assistants.
World Model Optimizer Tool
A pip-installable CLI that turns the OpenTelemetry traces your agents already emit into a routing policy: it scores every model you have registered against held-out tasks from your own traffic, then serves an endpoint that sends easy requests to cheap models. Treat the routing as the product; the distillation half has no released checkpoint yet.
VulnHunter Tool
Capital One's open-source agentic AI tool that analyzes source code from an attacker's perspective, tries to disprove its own findings before reporting them, and writes targeted fixes. Built for Claude Opus 4.8 in Claude Code; Apache 2.0.
Terminal-Bench 3.0 Tool
Continuously versioned agent benchmark with 74 tasks across seven domains, from databases and CUDA to Lean proofs, CAD, and music notation. Separates the agent container from the verifier container to block reward hacking, and is open to community task contributions.
TencentDB Agent Memory Tool
MIT-licensed memory layer that compresses conversation history into a semantic hierarchy of atoms, scenarios, and personas, with a gateway exposing capture, search, and recall endpoints. Its own benchmarks report token savings in the 31 to 61 percent range. Note that bearer auth and CORS allow-listing both default to off.
T-Search Tool
An open agentic retriever you can try in the browser - it runs multi-round evidence gathering for questions that need several searches chained together rather than one lookup.
Solar Open 2 Tool
Upstage's 250-billion-parameter mixture-of-experts model activates only 15 billion parameters per token and runs on two NVIDIA H200 GPUs once quantized, with a one-million-token context aimed at long multi-step agent work. Weights and a full technical report are public under a custom license requiring Solar-prefixed derivative names and Built with Solar attribution.
Skill Self-Play Tool
Apache-2.0 release of a system that grows and prunes a library of skill packages, each with routing metadata, examples and an executable validator, then trains a solver on the tasks they generate. Includes benchmark material and training launchers; expects eight visible GPUs.
Semgrep Tool
Static-analysis security scanner that finds vulnerability classes like broken access control in real codebases, increasingly paired with AI models in its pipeline. Its public benchmark work this week is also a useful, honest reference for how well current models actually find security bugs.
SearchOS Tool
Open-source (MIT) multi-agent web-research framework that treats search like an operating system: progress lives in an explicit evidence graph, coverage map, frontier task queue, and failure memory instead of chat history, with a pipeline-parallel scheduler. Ships a CLI/TUI, web frontend, installer, and replayable sessions.
Resource2Skill Tool
Microsoft runtime that compiles tutorials, repos, and articles into structured, executable agent skills with provenance. MIT-licensed, with skill libraries for Web, PowerPoint, Excel, Blender, and audio.
Recursive-Task-Synthesis Tool
A public set of 37,484 verified long-horizon terminal-agent tasks, each a runnable bundle with instruction, environment, reference solution and hidden verifier, plus a companion set of 327,000 agent trajectories and three fine-tuned Qwen3.5 checkpoints.
Prime Agent Tool
Open-source self-improving coding agent that gives the model a persistent Python session as its main tool - files, shell, sub-agents and context management all happen as code, and working state survives past a single chat window. MIT licensed; number one on GitHub Trending today.
Poolside trajectory archive Tool
Poolside published the full agent trajectories behind its Laguna S 2.1 benchmark results, so anyone can read exactly what the model did on each task. Rare enough among model releases to be worth using as a reference for what auditable evaluation looks like.
Poolside Laguna S 2.1 Tool
A public-weight, 118B-total mixture-of-experts coding model with only ~8B active parameters that runs locally on a single 128GB machine via a 75GB Q4 GGUF, built for long-horizon agentic software work under the permissive OpenMDW-1.1 license.
Ouroboros Tool
An agent harness that improves its own tools, prompts and core implementation through reviewed commits, which then become the runtime for its next task. Public code, with benchmark campaigns run on frozen snapshots so the numbers mean something.
OpenMontage Tool
An open-source system that turns an AI coding assistant into an automated video-production studio, with a large library of pipelines, tools, and agent skills for editing and assembling video.
OpenClaw Tool
The fastest-growing repo on GitHub, now a MIT-licensed nonprofit, a neutral open framework for building AI agents that plug into any model or lab.
OpenAI Codex Security Tool
Part of OpenAI's Daybreak program: an agent that builds an editable threat model from your code repository, finds realistic high-impact vulnerabilities, and drafts and tests patches in isolated environments.
Oh My Pi Tool
Full-featured terminal agent harness that an independent benchmarker measured lifting DeepSeek V4 Flash 0731 from 44 to 64 solved tasks on an 89-task terminal benchmark, with no change to the model. It costs several times the tokens per solve.
OS-Shepherd-9B Tool
A 9B reward model trained specifically to judge whether a computer-use agent actually finished its task, built to cut the false-success verdicts that general-purpose vision-language judges produce. A 35B sibling and the OSReward benchmark ship alongside it.
NeMo Switchyard Tool
NVIDIA's library for routing each task in a multi-model system to the model best suited to it, so a frontier model handles planning while a cheaper one handles execution. Shipped alongside Nemotron 3.5 Lightning as the connective tissue for mixed-model agent stacks.
NVIDIA SkillSpector Tool
A scanner that inspects agent skills for security problems before you run them -- a static safety check for the fast-growing agent-skill supply chain.
NVIDIA Nemotron 3.5 Lightning Tool
A 30B mixture-of-experts model with only 3B parameters active per token, trained for the high-volume half of agent work: tool calls, result validation and subagent delegation. NVFP4 and BF16 checkpoints, with weights, training data and recipes released under a permissive licence.
NOOA Tool
NVIDIA's open agent framework, contributed as the flagship technical artifact of the Open Secure AI Alliance. Its README is candid that it is research software and that its generated-code checks are not a containment boundary, so run agents in OS-level isolation.
Muse Spark 1.1 Tool
Meta Superintelligence Labs' multimodal reasoning model built for agentic work - tool and computer use, coding, a 1M-token context window, and subagent orchestration; live in the Meta AI app's Thinking mode and on meta.ai, with a Meta Model API in public preview.
Muse Glimmer 30B Tool
Meta's 30-billion-parameter open-weight agent model under Apache 2.0, built for always-on local workflows with text and image input, tool use, a context window past 131,000 tokens, and a speculative decoder that drafts sixteen words at a time. Full weights, quantized builds, and the drafter are all in the release.
Multi-Head Latent Control Tool
Freezes a model and attaches two small heads that read its hidden states to decide whether to answer, use a tool, ask for information, abstain, or escalate to a stronger model. Open-sourced with matching small checkpoints; needs white-box access.
Microsoft Memora Tool
Open-source memory system for AI agents that stores rich content but searches it via tiny abstraction labels and cue anchors, cutting token cost on long-horizon tasks. Includes a distillable retriever.
Microsoft Agent Governance Toolkit Tool
Policy middleware for agent tool calls: binds identity, evaluates policy per action, logs decisions and can deny calls, with Model Context Protocol security checks and prompt-injection detection. Public Preview; app-layer only, so OS isolation still needs containers.
Meta Model API (Muse Spark 1.1) Tool
Meta's first paid, hosted model API, built around the Muse Spark 1.1 multimodal reasoning model -- a million-token context window with active context compaction, zero-shot tool and MCP support, and an OpenAI-compatible interface so existing code drops in with little more than an endpoint change.
Macaron-V1 Tool
Open weights for a model family that freezes its base and composes specialist LoRA adapters on top, picking one per user turn. The 744B Venti flagship carries chat, agent, coding and generative-UI specialists; the 50B Tall variant runs the same design on local hardware.
Ling-3.0-flash (free API) Tool
Ant's 124B-parameter mixture-of-experts model that activates only 5.1B parameters per token, with a 256K context and OpenAI- and Anthropic-compatible endpoints. Currently free on OpenRouter as inclusionai/ling-3.0-flash:free; aimed at long-horizon agent workflows and tool calling.
Kimi K2.7 Code Tool
Moonshot AI's trillion-parameter mixture-of-experts coding agent, with only 32B active per token, a 256K context, and vision input, now selectable inside GitHub Copilot and downloadable under a Modified MIT license.
JarvisHub Tool
Canvas-native agent runtime where a typed graph of artifacts, versions, dependencies and provenance replaces the chat transcript as the agent's memory and action surface. Ships web, API, runtime, schema and trace-viewer components with local persistence.
Headroom Tool
A drop-in proxy that sits between your coding assistant and the AI model and automatically compresses bulky tool outputs, logs, and retrieved text before they reach the model — cutting token usage sharply without changing your code.
Grok Bot Tool
Early-beta desktop and iOS agents from xAI that sign into your own accounts, keep their own computer, run saved routines on a schedule, and work in parallel while your laptop is closed.
Grok 4.6 Tool
xAI's new frontier model, tuned for long-running agents and available day one in Cursor, Grok Build, and the xAI API. Two dollars per million input tokens and six per million output, with a faster variant at double the price.
Gemma Gem Tool
A Chrome extension that runs Gemma 4 E2B locally through WebGPU using an ONNX build with 4-bit weights, and gives the resulting agent page-reading, clicking, typing, screenshot and JavaScript tools. Worth knowing before you install: the widely quoted ~500MB is the cached download on disk, and the project's own estimates for GPU and system memory during inference are substantially higher and not benchmarked on real devices.
Gemini 3.6 Flash Tool
Google's newly GA fast model streams output nearly twice as fast as 3.5 Flash and costs less per task while holding the same intelligence-index score, tuned for high-volume agent loops that use fewer tokens and tool calls.
Gemini 3.5 Flash computer use Tool
Google's fast model can now operate a browser, phone, or desktop directly as a built-in tool, with optional confirm-before-acting and auto-stop-on-attack safeguards for building automation agents.
GPT-5.6 (Sol / Terra / Luna) Tool
OpenAI's newest model family, tuned for cheap, fast, reliable agentic work, with programmatic tool calling, a multi-agent beta, persisted reasoning, and a high-reliability 'pro' mode.
GLM 5.2 (GGUF, runnable locally) Tool
Zhipu AI's open, MIT-licensed mixture-of-experts model with a roughly million-token context, now packaged as ready-to-run quantized files you can host on your own machine. Strong on agent and coding workflows; this week it beat Claude on a narrow security benchmark at a fraction of the cost.
Frontis-MA1-35B Tool
A 35-billion-parameter open model post-trained specifically to write, run, debug and recombine machine-learning code inside an evolutionary search loop. Released with the full OpenMLE stack, so the search framework it was trained for is public too.
Fortress Tool
Open-core stealth Chromium with C++-level fingerprint patches that lets browser agents and scrapers pass bot detection (Cloudflare, DataDome, Turnstile); ships 29 pre-built MCP tools for the agentic web.
Firecrawl Tool
A hosted API that crawls, scrapes and structures web pages into clean text for agents and retrieval pipelines, handling the JavaScript rendering and rate limiting you would otherwise build yourself.
FastMCP Tool
A Python toolkit that turns ordinary functions into Model Context Protocol tools, resources, and prompts with generated schemas, validation, and docs, and a client that handles transport negotiation, auth, and protocol lifecycle.
Fara 1.5-27B Tool
Microsoft's MIT-licensed 27B multimodal agent that operates web browsers from screenshots alone, emitting clicks, typing, scrolling, and navigation, and trained to pause on ambiguity or unauthorized irreversible actions.
Emergent Tool
A natural-language software-creation platform that generates production-ready websites, apps, and dashboards for non-technical founders and small businesses; just raised a $130M Series C at a $1.5B valuation.
ECC Tool
Cross-host configuration for coding agents: shared skills, rules, commands and hooks plus security scans and gates that work across Claude Code, Codex and others, so one policy set follows you between harnesses.
Doubleword (async + batch inference) Tool
Run the same models you already use, but on async and batch tiers that trade latency for a large cost cut on workloads that don't need an instant reply: long-running agents, evaluations, and bulk jobs.
Docker Sandboxes (sbx) Tool
Free command-line tool that runs coding agents inside disposable microVMs with their own kernel, filesystem, network, and private Docker engine, so an unsupervised agent cannot reach the host. Supports Claude Code, Codex, Copilot, Cursor, Gemini and others on macOS, Windows, and Linux; commercial use included at no cost.
DeepSeek-V4 (Pro & Flash) Tool
Two newly previewed open-weight models with a 1-million-token context window on by default - a large mixture-of-experts flagship and a smaller, fast everyday model. Downloadable weights plus an API.
DeepSeek V4 Flash 0731 (API) Tool
The updated V4 Flash checkpoint now serves behind the existing deepseek-v4-flash identifier, with a 1-million-token context, 384K maximum output, tool calls, and an OpenAI-, Anthropic- and Responses-API-compatible interface. Fresh input runs $0.14 per million tokens, output $0.28, and cached input $0.0028 - a fiftyfold discount on repeated prefixes.
DataFlow-WebUI Tool
An open-source platform where an LLM agent builds persistent, editable data-processing pipelines as validated graphs through a conversational interface and visual editor, instead of emitting throwaway scripts.
Cursor Design Mode Tool
Edit a running web app by clicking elements, drawing on the page, or describing the change out loud, and Cursor rewrites the underlying code with the app hot-reloading as it goes. Visual context instead of file paths.
Cursor Tool
The AI-native code editor whose real-world developer interaction data trained Grok 4.5; a mature, widely-used tool for agentic coding across many models.
Cloudflare Temporary Accounts Tool
Lets an automated agent deploy and run on Cloudflare before a human signs up, removing the account-creation step from agent workflows.
Cloudflare OS Tool
Open-source platform where agents never hold credentials: a Gatekeeper does the OAuth and hands the agent a typed capability scoped to one resource, and every user-built app runs sandboxed with its own SQLite state. Runs locally on workerd for evaluation, or deploys into your own Cloudflare account.
Claude Video Tool
A /watch skill that downloads a video, extracts adaptive keyframes, pulls existing captions or falls back to Whisper transcription, and hands the material to the host coding agent. An input adapter rather than a planner.
Claude Sonnet 5 Tool
Anthropic's new most-agentic mid-tier model, close to its flagship on hands-on tool and coding work; now the default on Free and Pro plans.
Claude Science Tool
An AI workbench that unifies literature search, notebooks, statistics, and cluster compute, and keeps a reproducible record behind every figure. Beta on Mac and Linux.
Claude Code auto mode Tool
A permission mode that replaces per-action approval prompts with a separate classifier model which blocks escalation, unrecognized infrastructure and actions driven by injected content; becomes the default on 14 August 2026.
CachyLLama Tool
MIT-licensed llama.cpp fork that saves conversation and system-prompt caches to SSD and restores them after a restart, so local agents stop reprocessing the same prompt prefix every turn. Its own benchmark reports long repeated agent prefixes going from minutes cold to about a second warm.
Artificial Analysis Agentic Index Tool
A public leaderboard averaging agentic benchmarks that give models shell and web access, including a multi-step banking workflow scored on the resulting database state rather than the model's own summary. Lists reasoning effort as part of each entry, which matters more than most coverage admits.
Anthropic Skills Tool
The reference repository for Claude's skill format: a folder with a SKILL.md file, YAML frontmatter requiring only a name and description, plus optional scripts and resources. Works across Claude Code, Claude.ai, and the API, with plugin-marketplace install instructions.
Agentic Resource Discovery (ARD) Tool
Google's open specification and manifest format (ai-catalog.json) that lets AI agents discover and verify tools and other agents across organizations -- a directory layer for the agent web, backed by Microsoft, Nvidia, Salesforce, GitHub, and Hugging Face.
AgentDojo Tool
Independent benchmark for prompt-injection resistance in tool-using agents, used this week as the external check on whether adversarially generated alignment data actually transfers rather than overfitting to its own test set.
AWS Agent Toolkit for AWS Tool
Official AWS-supported set of MCP servers, skills, and plugins for building AI agents that work with Amazon's cloud services, maintained by AWS itself.
AREX-Turbo Tool
Apache-2.0 4-billion-parameter deep-research agent from BAAI that audits its own provisional answers against the question's constraints and re-runs research when confidence is low. The public quick-start exposes search and page-visit tools but not the paper's full outer control loop.
AIRI Tool
Self-hosted embodied assistant with a Live2D or VRM character, voice, persistent memory, local inference support, and game and chat integrations. A vertical application rather than a general agent framework.
ADR Tool
Uber's runtime detector for coding agents, watching what agents actually do on developer machines rather than filtering prompts. Reported 206 credential exposures at 97.2 percent precision across 7,200 hosts, and ships with ADR-Bench, a 300-task benign-versus-malicious evaluation set.
ABSeeker Tool
A released 4-billion-parameter web-research agent trained with per-step credit assignment that matches roughly 30-billion-parameter agents on hard fact-finding tasks.
1F916 Tool
Public discussion forum whose citizens are AI agents, reachable only by JSON API or MCP. Registration issues a secret key, posting is capped at one per day, and the whole ledger is a checkable hash chain. Useful as a working reference design for agent-to-agent coordination.