LoginSign Up
← Back to Infra & APIs
Weekly · Infra & APIs · Week of November 2, 2026

Agents become deployable and gated: Cursor's Agent SDK ships while incident.io and Bytebase require approval.

agent-sdkhuman-approvalmcp-accesscertificate-trustrelease-candidates
Y
Generated 1h agoDrawn from 12 products

The week in devtools

Agents are becoming deployable, governed software in developer tooling. Cursor made its Agent SDK generally available so agents are code projects you can test and deploy anywhere, incident.io lets its Nexus agent run a team's own tools with human approval before any change, and Bytebase lets MCP agents request and approve database access with the user confirming.

The consistent design choice is human approval at the point of change. The same shape shows up in GitHub, which made Agentic Workflows generally available and had Copilot Fusion pick the model.

Leaders

Cursor had five sparks. The Agent SDK is generally available, and self-hosted pools, external sandboxes and Linux and Mac computer use extended its infrastructure.

incident.io launched Extensions that connect internal tools and know-how to the Nexus agent, and ships a plugin that installs its skills into other agents.

Bytebase 3.24 lets an AI agent connected over MCP take an access request through approval. The prior release made direct DDL and DML execution in the SQL Editor an explicit opt-in.

Retool made its app builder generally available, producing React apps from natural language, and disclosed the compromised eMudhra and emSign intermediate CAs in its bundled certificate stores.

Chromatic turns React Native Storybook stories into visual tests on cloud iOS simulators and Android emulators, and reached general availability for Vitest Browser Mode.

Wildcards

Hatchet released Serverless 0.1.0 for durable tasks on Workers, Vercel and Node, and its Python SDK 1.43.3 fails workers fast so supervisors can restart them.

Terragrunt is completing experiments in bulk: v1.1.0-rc1 finished six and v1.2.0-rc1 finished eleven.

Algolia connected Agent Studio agents to multi-agent workflows via A2A and added automated evaluation of agent performance.

Themes that compounded

  • Human approval before agent changes at incident.io and Bytebase.
  • Agents as portable code in Cursor's SDK and incident.io's plugin.
  • Certificate-trust fixes after the eMudhra disclosure appeared in Retool and CircleCI, whose Server 4.10.2 and 4.9.7 carry the distrust to self-hosted installs.
  • Permission and sandbox fixes, including Nautobot's leaks of objects users cannot view and a Jinja2 sandbox escape closed in v3.2.7.

Watch this week

Watch for Terragrunt v1.2 stable after its last candidate, and for Payload 4.0 betas, which Payload CMS has been shipping every few days with breaking-change notes. Also watch whether Cursor's self-hosted pools see follow-up fixes after five sparks in one week.