The read path shipped; Flodesk, Usermaven and Buildkite all held back the write

The lead

The interesting decision in today's releases is not what agents were given but what was withheld. Flodesk put member email, subscriber, form and sales data inside Claude and ChatGPT at no extra cost — read-only, labelled phase one, with segmentation and subscriber management named as what follows. Usermaven added a Salesforce connection that is read-only in its first cut, in the same release that shipped Reverse ETL, the mechanism a write-back would use. Buildkite has covered the read side of its MCP server — a wait tool instead of a polling loop, aggregated test metrics instead of assembled runs — and leaves retrying jobs and editing pipelines for later. DatoCMS shipped Agent Skills and a remote MCP server; the piece it does not have is scoping.

Read access is cheap to grant and easy to withdraw. A write is a claim about identity and permission, and most of these products have not built it yet. Canix is the exception, and it crossed in the least forgiving place available: its Purchase Order agent now builds purchase orders from incoming email, which are records a state track-and-trace regulator later inspects. It shipped in alpha, behind an MCP server that spent months only reading. Which is why the identity vendors had the busiest day of anyone.

What moved

• Agents stopped borrowing a human's session. WorkOS shipped Agent Registration via the auth.md protocol, plus a Pipes Token Proxy that calls third-party APIs for a user without the application ever holding their token. Auth0 put Custom Rate Limits into Early Access so one client cannot exhaust a tenant's entitlement, beside Agents as Principal and Token Vault Privileged Worker, both still unreleased.
• Cursor became the forge. Cursor Origin hosts repositories and pull requests inside Cursor itself, so prompt to merge never leaves the product. Buildkite shipped as a day-one launch partner on the Origin app tab, next to Vercel and Depot.
• Approval got an evidence file. Speakeasy turned its Shadow MCP page into a review surface where every server carries an approval state and an automatically gathered dossier: publisher, requested scopes, declared capabilities, maintenance signals, and whether internal teams already talk to it. Teable made Skills admin-published and added an instance-wide switch over whether platform AI keys reach Apps; Merge made Gateway guardrails per-project rather than per-account.
• Plumbing with no agent in it. rsyslog's August snapshot adds imkubernetes, so the syslog daemon on every Linux box tails pod logs itself, beside a segmented disk-assisted queue as the default for new stores. QuestDB made QWP, its own binary columnar protocol, the default path both in and out; Manticore Search shipped three patch releases in eight hours stabilising its 29.0 line in public.

Sectors today

• devtools (60 products): the day's centre of gravity — identity, CI, and a long R package tail.
• development: Speakeasy and Workato push agent governance; the rest is release engineering.
• analytics: ApexCharts returns to library work now licensing has settled; Plotly meters cloud compute.
• ai-assistants: InvokeAI's video release reaches a second candidate, now with Intel GPUs in scope.
• ecommerce: Canix crosses into writing records; SureMembers wires itself into SureForms.
• communication-messaging: Mux now pairs each manual control with a Robots workflow that does it for you.
• marketing-automation: Flodesk leaves for the chat clients; Mailtrap adds domain reputation monitoring.
• marketing: GMass interprets campaign analytics rather than charting them; the rest of the sector ships nothing.
• video-conferencing: Wowza keeps arguing for detection inside the streaming pipeline itself.
• collaboration: Teable governs Skills centrally; Simpplr ships the store its own research called for.
• hr-recruiting: Eightfold AI now runs the interview loop; Wagepoint guards the payroll approval gate.
• design: Storybook is turning its component workshop into tools an agent can call.
• project-management: Plane's fortnightly digest is now mostly AI work.
• crm: Twenty finishes an ORM migration; Phorest prices the stylist, not the service.
• lms-edtech: iSpring moves AI from whole courses down into every text field.

Watch tomorrow

Whether Flodesk's phase two opens, whether Usermaven's Salesforce link goes bidirectional, and whether Canix's Purchase Order agent leaves alpha are the same question asked three ways — and Buildkite's write-side MCP tools would be a fourth. Auth0's Early Access pile now has a proven route to general availability, so which agent-identity piece walks it first is readable from here. Cursor said agent-native Origin features ship soon. Several tracked feeds carried no releases at all this window: Woodpecker, Netcore Cloud, WebinarJam, Antavo and ShipHawk are content engines, Shopaccino's feed is a marketing page scrape, and Jackett's daily tags are two indexer edits at a time.