MCP & Interop

Zoomtopia 2026 made ZoomMate Agent Teams, MCP servers and the Search & Ask APIs available now, while Centralized AI Management, Compliance Manager for AI notes and AI Guardrails are dated December 2026 through Q1 2027. Here is the rollout order that follows.

Hex-Rays, maker of IDA Pro, is buying HexAI (formerly Ventris) for a reported $30M-$35M. Its new AI research tools are currently available only through HexAI, so IDA customers should settle model choice, air-gap support and pricing before they renew.

Schwab and JPMorgan now block outside AI agents that log in with customer credentials. Schwab will let models in through its own MCP servers to read and, for some traders, trade, but no outside agent may move money.

Agilent is buying Proscia for $240 million plus up to $30 million in milestones, and it already sells its own slide scanner. Labs and pharma teams on Concentriq should get scanner support, third-party AI access and data export written into their contracts before close.

Asurion kept its invoice capture tool and put a Copilot Studio agent on the exception queue, where 90% of its PO invoices were failing. Touchless AP rose from under 20% to over 70% in the Americas.

Anthropic licensed OPAQUE's confidential AI technology and hired part of its team. OPAQUE's announcement says nothing about the platform, support or its open-source projects, so customers should get answers in writing now.

Microsoft's internal agent makers grew from about 2,000 to 20,000 a month once software auto-approved green builds and declined red ones. The scoring rubric behind those colors was never published, so here is a starting version built from Copilot Studio's own data-policy levers.

Workday's requisition data from about 550 employers shows demand for basic AI skills such as prompting peaked in January 2026 and fell 25%, while hands-on AI building skills rose 51%. Internal moves fell at 57% of employers.

SAP is buying TechWolf, whose certified integration writes inferred skills into Workday Skills Cloud. The only promise to non-SAP customers is continued availability, with no end date or price term.

Google is replacing Gemini Gems with skills. Remaining Gems convert to inactive drafts that only their creators can activate, and Workspace Studio flows with Ask a Gem steps stop working no sooner than March 1, 2027.

Agent orchestration mentions in bank job ads rose 1,721%, from 108 to 1,967. Governance skills appear about twice as often as model-building skills, which makes the agent owner the role to reskill for.

Mitratech bought BotDojo to run ARIES agents on matter and spend data. BotDojo's public terms have no export or assignment clause, and no one has said what happens to its Salesforce and Zendesk customers.

Omada bought EmpowerID for runtime AI-agent authorization, but the two vendors' IGA suites overlap and the announcement says nothing about EmpowerID's product line or support. Get commitments in writing before renewal.

Govern MCP servers at the client: pin them by URL and version-pinned command in Claude Code and Copilot managed settings, gateway shared credentials, and treat registries as catalogues rather than controls.

Upwind's stock deal for nine-month-old Aegis buys a team and a research lab with no ship dates, SKUs or prices. Don't credit AI-agent security toward a renewal until it ships, and write change-of-control terms into early agent-security pilots now.

Claude Opus 5.5 cuts per-token prices 20% and cache reads 60%, but forced tool_choice and disabled thinking now return HTTP 400, the default effort drops to medium, and the 40% saving compares different effort levels.

On UNICEF's own statistics, a generic SDMX MCP server scored 0.074 at returning the right figure for the right year, below the 0.147 of no tools. A purpose-built server scored 0.990. As the UN opens 44 million data points to agents, the lesson for enterprise data teams is to fund the resolver, not the connector.

Standing credentials are the root of agent risk. How AgentCore, Aembit, Auth0, Permit.io and Cerbos handle delegation, per-call policy, approvals, audit and blast radius — and which to buy first.

An unrepaired probability sample of 400 MCP servers found only 48.8% complete an initialize handshake, and 37.5% never start at all. Meanwhile 68.8% of BFCL v4's extracted tool definitions and 85.6% of UltraTool's are exact repeats, against 0.4% for real MCP tools.

Shopify's purchase of Tailwind Labs leaves the MIT-licensed framework untouched but closes Tailwind Plus and ui.sh to new buyers. The bigger lesson: AI agents broke the docs-to-paid funnel that funded it.

A scan of 3,171 public repositories found 16.0% of AI coding-agent setups carry a security defect. The largest class is an MCP server declared with no version at all; the most misleading is a permission grant that reads as scoped but authorizes any command.

The Era by Eon Benchmark ran nine models over 33 questions three times each and published the 95% intervals alongside the leaderboard. They are about 30 points wide, and 33 of the 36 pairwise comparisons could not be called. Your internal bake-off has the same problem.

A study of 77,773 Claude Code plugin commits re-classified every one by what its diff actually did. Of 8,007 commits labelled 'docs', only 16% were documentation — the rest changed what the agent does at runtime, through the exact path most review policies auto-approve.

Claudeforce puts 37 prebuilt sales skills inside Claude, with open beta in September 2026 and no published price. Salesforce meters MCP tool calls against your org's shared daily API allocation; Anthropic bills inference on a separate contract with no ceiling.

IBM's TLS platform standardized every agent boundary on A2A and every tool boundary on MCP, which let five of its six specialist agents be built by outside teams. It also left the platform team unable to push a better reasoning pattern into agents it doesn't own — even though every agent already imports the library that contains it.

Entra Agent ID and Okta for AI Agents issue agent credentials. SailPoint Agentic Fabric governs identities it never issues. Which one you need is decided by where your agents already authenticate — and Microsoft is the only vendor of the three that publishes a price.

A controlled crossover experiment with 34 inspectors found ChatGPT support was associated with about 8% lower specification defect-detection F1 while saving no time at all. The cohort that learned the task unaided first improved roughly 12% between periods against 7% for the cohort that started with the tool.

A layer-by-layer map of the enterprise agent stack, priced against one workload on 23 August 2026. Four layers to buy, three to skip, and the seams where all of them fail together.

Google put Antigravity inside Gemini Enterprise on 20 August with a promise of browser and MCP access control from one admin console. Google's own enterprise documentation says admin URL allowlists are not yet honored — so the real boundary is still your proxy and a text file on each developer's laptop.

Meta's Muse Glimmer scores 75.5 on MCP Atlas inside a 24GB memory envelope under Apache 2.0, so agentic tool-calling now runs on hardware engineers already own. Every AI control you have — prompt logging, token accounting, DLP, model pinning, the kill switch — is implemented at a gateway that no longer sees the traffic.

Anaconda acquired Enkrypt AI on August 4 for undisclosed terms, putting the red-teaming vendor you chose for its neutrality inside a platform company. The bigger exposure is the license: Anaconda spent 2024 and 2025 enforcing a 200-employee 'free' threshold with demand letters that threatened back bills, and Enkrypt's $0 and $149 self-serve tiers now belong to it.

Snowflake's Cortex AI Gateway at Black Hat 2026 reveals the enterprise AI security gap no one talks about: your agents inherit your admin privileges.

The AI agent protocol running your enterprise stack changed permanently today. Here's what MCP 2026-07-28 means for platform teams and security.

Two binding DMA decisions force Google to open 11 Android AI features to rivals and share search data with AI chatbots by January 2027. The EU just classified AI assistants as infrastructure — and every enterprise CIO building on platform-specific AI integration has 12 months before that exclusivity ends.

Jscrambler's npm package was hijacked to steal Claude Desktop, Cursor, and VS Code credentials via Rust infostealer — days after npm 12 shipped.

PwC's 2026 AI Jobs Barometer — analyzing over one billion job advertisements across 27 countries — reveals a structural split in the global labor market. 'Professionalised' roles where AI amplifies human judgment are growing 2x faster with 42% higher wage growth, while 'democratised' roles where AI lowers the skill bar are stagnating. Workers with AI skills command a 62% wage premium. Entry-level roles are being 'seniorised' — demanding senior skills 7x more often. Here's the workforce assessment framework and entry-level redesign playbook every CHRO needs.

AI Agents Can't Act. Genesys Just Bought the Fix.. Genesys Pinkfish — data-driven insights for CIOs and business leaders.

Security researchers demonstrated a new attack class called Agentjacking that hijacks AI coding agents through fake Sentry error reports — no credentials stolen, no servers breached, no malware deployed. A single POST request with embedded markdown turned a Fortune 100 company's AI coding agent into an exfiltration tool. Tenet Security found 2,388 organizations exposed and achieved an 85% success rate across Claude Code, Cursor, and Codex. The NSA had already warned about this exact vulnerability class. Enterprise attack surface assessment and security hardening checklist inside.

OPAQUE 3.0 launches with Agent Manifest and Confidential MCP — the first verifiably governed Model Context Protocol implementation — bringing cryptographically provable trust to enterprise AI agents. Built on Microsoft's open-source Agent Governance Toolkit, the platform closes the 51-point gap between writing AI security policies and enforcing them with hardware-signed proof.

Agents hit production unevenly. MCP became the integration standard. AI FinOps went from edge concern to universal practice. Here's what actually changed in H1 2026 — and what's coming next.

Gartner published its first Magic Quadrant for Enterprise AI Coding Agents on May 20, 2026 — and the leaderboard looks nothing like the AI Code Assistants category it replaced. Anthropic, Cursor, GitHub, and OpenAI are Leaders. AWS and Google dropped to Challengers. The shift from code completion to autonomous plan-act-verify agents redefined what counts — and the cloud giants' IDE-centric tools no longer meet the bar. This article includes a vendor evaluation matrix and an adoption readiness scorecard for engineering leaders evaluating AI coding agents.

Cohesity embeds cyber resilience into Claude, Gemini, ChatGPT via Model Context Protocol—no separate console needed. 70% of Fortune 500 already use it.

Between May 5 and June 8, Dun & Bradstreet signed partnerships with Anthropic, Microsoft, and OpenAI — all three major AI providers — in four weeks. S&P Global partnered with Cohere. Snowflake deepened its $200M Anthropic partnership. Legacy data companies are becoming the most important layer in the enterprise AI stack. The moat is not the model — it's the verified, governed data that agents need to act with confidence.

Anthropic's Model Context Protocol hit 97M downloads and 41% enterprise adoption. What procurement teams need to know about this new integration requirement.

65% of firms hit AI agent incidents in 12 months. McKinsey lost 46M messages in 2 hours. Inside Noma's launch and the access-control fix.

Snowflake bought MCP gateway Natoma May 27. Inside the build-vs-buy-vs-platform decision matrix and 25-point governance readiness score for CIOs.

OpenAI shipped Skills governance + Compliance Logs to ChatGPT Enterprise May 27. Get the 25-point readiness score and 8-week CIO rollout.

ACS shipped May 27 — a vendor-neutral runtime hook spec above MCP and A2A. The 25-point readiness assessment and 12-week roadmap to close the 8:1 gap.

Ping's May 27 launch joins Okta and Microsoft Entra in a 3-way agent identity war. Decision matrix + 25-point readiness assessment for CISOs.

60% of enterprises can't terminate a misbehaving AI agent. EU AI Act fines hit Aug 2. Inside the kill-switch crisis—and a 25-point readiness assessment.

NVIDIA shipped Verified Agent Skills and SkillSpector May 22. Trust-tier matrix and 15-point vetting checklist CISOs need before scaling 37 agents.

Anthropic just shipped self-hosted sandboxes and MCP tunnels for Claude agents. Here is the decision matrix CIOs need before the next $4.44M AI breach.

Salesforce's $8B Informatica bet just shipped: fully headless MCP data services across AWS, Azure, GCP, Databricks, Snowflake. Why AI agents need this layer.

Notion's May 13 Developer Platform launch ships External Agents API, Workers runtime, and database sync — and undercuts Microsoft Agent 365 pricing.

Boomi launched its MCP Gateway with 1,000+ tools at Boomi World 2026. Inside the bet to govern Fortune 500's coming 150,000-agent sprawl problem.

Anthropic's $1.5B venture reveals the real enterprise AI bottleneck. Deloitte data shows 84% haven't redesigned workflows, and 70% of challenges are people problems.

SAP just banned third-party AI agents from its APIs. Salesforce just exposed every capability to them. Two opposite enterprise architecture bets.

Anthropic's Model Context Protocol hit 97M monthly downloads. Learn how it cuts AI integration time from months to days and saves enterprises 40% on costs.

Anthropic shipped 9 Claude connectors for Adobe, Blender, Ableton, Autodesk + 5 more — bundled free across all plans. The creative ops repricing event.

Enterprise pilot-to-production conversion jumped from 18% to 31% in Q2 2026. Three factors drove the shift: MCP standardization, 42% cost compression, and maturing eval tooling. Here's what the $42.6B in funding and shifting vendor landscape mean for your AI strategy.