Agents get their own doors: MCP servers, run identities and live remediation lead a spark-heavy day
The lead
Ten products carried a spark today, and most of them share one move: vendors are building a front door for software agents rather than only for people. Spryker built an MCP server into its Storefront API so AI agents can shop. Cursor now builds, hosts and links internal apps. Prowler 5.48 watches AWS live and can fix what breaks instead of waiting for the next scan.
The improvements underneath point the same way. Retool gave workflows their own run identity, Fulcrum lets AI assistants sign in to its MCP server with a normal account, and Virto Commerce lets admins register AI agent clients as OAuth apps. Access control for agents is becoming a product surface of its own.
What moved
- Agent-facing commerce and tooling: Spryker's Storefront MCP server is the clearest spark. Teable added an MCP tool that queries records without SQL under existing access controls, and Calibre MCP lets a coding agent read RUM and Lighthouse data, then fix the slow code.
- Autonomy with an approval gate: Salesmsg Sherpa AI now sends replies and builds broadcasts on request, with approval first. Atarim turns care plans into scheduled AI work and lets small fixes go live without approval.
- Pricing and workflow shape: Ably dropped usage-metered pricing for a flat price per monthly active user. Apache Airflow 3.4 adds loops in Dags and lets teams write Dags in Go, Java, TypeScript or YAML.
- Observability and creative tools: SkyWalking 11.1 builds service maps from OpenTelemetry traces with no SkyWalking agent. InvokeAI 7 reaches beta with projects and a single widget workbench as the default, and Gravity Wiz previews Flowcrafter, a visual workflow canvas for Gravity Forms.
- Platform housekeeping: GitHub made Copilot code review an API-managed policy, with @GitHub in Slack and Teams going GA, and Shopify shipped a November POS batch with QR wallets and French debit cards.
Sectors today
- Devtools (34 products): the deepest sector, with sparks from Cursor, Airflow, Prowler and Ably, plus Hatchet putting sandboxes and durable streams behind opt-in Labs switches.
- Analytics (16): SkyWalking and Calibre both tie observability data to agent or vendor-neutral inputs, while Loki 4.0 reached RC3 and narrowed S3 storage classes.
- Collaboration (14): Teable and GitHub led, both focused on controlled access for AI tooling.
- Ecommerce (10): Spryker's agent shopping and Virto Commerce's OAuth registration for agent clients make this sector's story about agent access.
- AI assistants (10): InvokeAI's beta leads, alongside Ollama v0.40.15 adding MiMo V2.6 and Kimi Code CLI in launch.
- Communication and messaging (8): Salesmsg's approval-gated Sherpa and Fonoster letting voice agents pick Anthropic, Google or Groq models.
Watch tomorrow
The approval question is the thread to follow. Salesmsg asks for approval before sending, while Atarim lets small fixes ship without it, and Prowler's remediation sits in between; see which model other vendors copy. Also watch the identity layer: Retool, Fulcrum and Virto Commerce all moved on it in one day. Separately, Leapsome and 3CX are worth a look for noise, since Leapsome's feed keeps filling with hiring guides rather than release notes and 3CX is retiring its own cloud transcription in favour of customers' own AI.