Telexed

telexed ~ home★4 and up · hourly · UTC+09LIVE

TELEXED// solo-operator signal radar · Issue 412

AI news through a solo-operator lens — only what changes your day2 of 412

FILTER[All][Agents & tools][Models & API][Generative media][Infra & SaaS][ASO & growth][Indie business][Idea signals][Other][★6+ high-signal]

MCP Servers ✕clear filters

Mon, May 181 dispatches

#0412
#0412Agents & tools MCP Servers2 days ago
`MCP Servers` adds tool-level annotations to `get-annotated-message`
40radar
Model Context ProtocolAgent tool protocol — standardized server and tool interface
The official server examples now expose metadata at the tool level. Small change, but useful when testing how agent clients read MCP tool hints.
- get-annotated-message now carries tool-level annotations, giving client builders a concrete fixture for metadata handling.
- Scope appears limited to the everything example server, so production impact is narrow unless you maintain an MCP client or server.
- Good regression-test material for agent UIs that surface tool hints, permissions, or read-only/destructive labels.
Source: github.com/modelcontextprotocol/servers/commit/b1e1eb1a5Read original →
FIG-4121:1
40radar
FIG-4121:1

Sun, May 171 dispatches

#0411
#0411Agents & tools MCP Servers3 days ago
`mcp_servers_official` patches Node dependency security alerts
50radar
MCP ServersMCP server collection — official reference servers and integrations
Several runtime and build-chain packages got patched without breaking changes. Worth mirroring if your MCP server or Node tool exposes static files, routing, or rate limits.
- @hono/node-server moved 1.19.9 -> 1.19.14, closing encoded-slash auth and serveStatic bypass paths.
- hono moved 4.11.7 -> 4.12.17; file access, cookie/SSE injection, and IP matching bugs make this a ship-now update.
- express-rate-limit 8.5.0 fixes IPv4-mapped IPv6 bypass, which matters for public APIs behind imperfect proxy config.
- path-to-regexp, minimatch, brace-expansion, ajv, and qs all include DoS/ReDoS fixes; audit transitive locks, not just direct deps.
- Remaining 7 moderate dev-only alerts sit in the vitest/vite/esbuild chain and need a major vitest 4.x bump.
Source: github.com/modelcontextprotocol/servers/commit/3f40d6e73Read original →
FIG-4111:1
50radar
FIG-4111:1