Agent access via MCP spreads across tools as GitHub makes license compliance enforceable
The lead
Agent access is becoming a product surface of its own. Teable shipped an official MCP server so coding agents can work its tables over OAuth, Gumloop lets its agent build custom MCPs for apps the platform doesn't support, Formbricks opened survey responses to agents through its API and MCP, and Twenty now runs agent conversations inside Slack threads.
The day's one enterprise spark is GitHub: open source license compliance is now a ruleset-enforced, generally available control on Enterprise Cloud. The other 68 updates were mostly incremental: release candidates, maintenance trains and admin settings. Volume was high; direction was narrow.
What moved
- Test reliability. CircleCI now sizes parallelism to the tests Smarter Testing actually selects, Buildkite puts slow and flaky tests on one page, and Aviator has an LLM in MergeQueue separate flaky failures from real ones and rerun them.
- Agents inside business workflows. Xurrent lets staff approve tasks inside Sera AI chat, Hive made its AI proofer a named approver, Tanda shipped its first AI agent for building reports from plain language, and RAGFlow 1.0 RC2 replaces chat thinking levels with an Agentic mode.
- Audit and security. Sanity can ship its admin activity log to customers' own cloud storage, Element cut guest access tokens to close two advisories, and SuperTokens patched seven auth advisories and made SAML IdP-initiated login opt-in.
- Platform floors rising. Tinybird switched off Classic for Free and Developer plans, Expo SDK 58 went stable with EAS Observe covering native crashes, and Wiki.js 3 beta now requires Postgres 17.
- Operations in the admin. Shopify added batch pick, print and pack for up to 250 orders.
Sectors today
- Devtools (14): test reliability led, with Expo's stable SDK 58 and Knock adding a terminal setup path via Stripe Projects.
- Analytics (8): mostly licensing and plan mechanics: Basedash view-only seats, Tinybird's Classic shutoff, OpenReplay offline license tokens.
- Collaboration (6): Teable's MCP server and Wiki.js 3 beta math and personal access tokens, with SiYuan layering database automation onto its alphas.
- Project management (6): SmartSuite dashboard filters can now exclude, Float is moving toward staffing on experience and rate cards, and Tracecat took 1.2.0 stable in under two days.
- HR and recruiting (5): Tanda's AI agent, Teamtailor fitting multi-division employers, and Ashby adding fiscal-year labels to its admin levers.
- Development (4): GitHub's compliance ruleset, Sanity's activity log export, Dapr 1.19 candidates stacking workflow and pub/sub fixes, and Scalingo adding JDK 27 and Python 3.15.
- Communication and messaging (4): Element's advisory fixes and Element X Android turning on multi-account and global search.
- Marketing automation (3): Gumloop's custom MCPs and n8n teaching queue-mode workers to suspend running executions on shutdown.
- AI/ML platforms (3): RAGFlow's Agentic mode and Arize Phoenix exporting its own server logs over OTLP.
- AI assistants (3): Baseten added its third new model API in eight days, while opencode retired its beta repo as V2 became the main line.
- CRM (3): Twenty's Slack-thread agents and Corteza release candidates landing daily.
- E-commerce (3): Shopify's warehouse tooling and CartFlows adding an activity log and email capture popup to Cart Abandonment Recovery Pro.
- Marketing (3): Privy added a Preference Center and Shopify order events as Flow triggers, and Saleshandy lets users exclude contacts they already own from Lead Finder.
- Customer support (2): Xurrent's in-chat approvals and Formbricks' agent access to responses.
- Video conferencing (2): rtpengine pushed a recursion guard to four branches, then fixed the compile break it caused; Nextcloud Talk patched v22 and v23.
Watch tomorrow
Three threads look live. Shift4 has Gift Card & Loyalty 26.2.1 notes posted ahead of an October 21 release. Nextcloud Talk is patching old branches while v25 stable sits five weeks past its last RC, and Dapr and RAGFlow both have release candidates that could go GA. Separately, treat some feed entries as crawl noise: Metricool and Netcore Cloud showed no product change, Free CPA Ethics CPE Course is a lead magnet rather than a shipping product, and Twenty and Wiki.js each appear twice under separate slugs.