LoginSign Up
← Back to Infra & APIs
Weekly · Infra & APIs · Week of October 12, 2026

Devtools made themselves legible to agents, from CircleCI's API v3 to Buildkite triage tools, while Expo shut its own agent down.

agent-readable-cimcp-server-surfacepermission-scopingsecurity-advisory-patchingoauth-for-mcpagent-experiment-wind-down
Y
Generated 2h agoDrawn from 14 products

The week in devtools

Forty-three products updated, and the single pattern that spans them is making the pipeline readable and operable by an agent. CI, deploy, secrets and test tooling each shipped an MCP surface or an API an agent can use.

The counter-signal arrived the same week: Expo wound down its own AI coding assistant. Not every agent bet is surviving.

Leaders

CircleCI launched API v3 and declared it the only place new API work will land, with every endpoint sharing UUID resource IDs. It also began running GitHub Actions workflow files unchanged on its own Linux runners, in preview.

Port took Workflows to GA as a governed orchestration layer, with Cursor agent orchestration and MCP permission scoping. Its AI Builder can now execute real catalog changes, and a Claude Managed Agents integration shipped.

Buildkite added MCP tools that let an agent diff a failed build against the last green one and retry only infrastructure failures. Remote MCP connections can now be pinned to a specific organisation.

Currents added a .md endpoint to every shareable failure link, an unauthenticated structured Markdown document with the failure context. Runs can also carry server logs and build output as attachments.

Railway shipped a hosted MCP server in its CLI so agents can manage Postgres, edit variables and connect to deployments. Sandboxes reached general availability, and MySQL point-in-time recovery arrived.

Infisical folded access approvals into one global approval system and added Ed25519 sign and verify keys to KMS. Its v0.165.13 release also forced a migration off gateway v1.

Wildcards

Expo ended its closed beta and wound down Expo Agent, its AI coding assistant, in the same week SDK 58 entered beta. It is the only agent product in this sector that was closed down rather than extended.

Parse Server is the other outlier: its alpha stream is almost entirely advisory fixes. LiveQuery $or subscriptions could leak other users' events, and a $relatedTo query using an operator skipped the owner's ACL.

Themes that compounded

  • MCP servers as the default integration surface at Railway, Buildkite and Redocly, which now breaks out MCP usage in analytics.
  • Authentication for those servers: Tolgee added OAuth 2.1 sign-in for MCP clients, with audience binding and SSRF hardening.
  • Approval and permission gates tightening: Bytebase made direct DDL/DML execution an explicit opt-in after a role-grant gap.
  • Security advisories on proxy and auth paths: Portainer closed a Docker proxy auth bypass and backported it to its LTS line.
  • Large CVE batches at MISP, where 2.5.47 patched 27.

Watch this week

SigNoz set 15 October as the removal date for its v1 alert-history endpoints, so watch for fallout from that. After API v3 at CircleCI, the open question is whether v2 endpoints get a deprecation date. Port shipped three sparks in a week, so watch for how its MCP permission scoping is used by customers.