Subscribe for all the latest news for developers on AI, Agents and MCP curated by the Langflow team.
Share
AI++ // agent security, MCP efficiency, and much more
Published 5 months agoย โขย 3 min read
The topic of security, specifically around prompt injection, is often raised and then dropped with a bit of a shrug as the path to a solution isn't very clear. Thankfully there are people out there thinking hard about it. In AI++ today, there are articles from Meta and Perplexity on this, with ways to mitigate the issue that we should all read and learn from.
We've also got news of some great AI events coming up, including the online OpenRAG Summit, along with news of introspective AI models, models getting brain rot from social media, and how MCP can be more efficient with just code.
โPhil Nashโ Developer relations engineer for Langflow
๐ ๏ธ Building with AI, Agents & MCP
Agent security
Meta released this article on the Agents Rule of Two. By only allowing agents unsupervised use of tools from two out of the three categories of the lethal trifecta (access to private data, exposure to untrusted content, and a method of external communication), you can avoid this category of problems. This article on assigning colors to tools to help understand the risks is a good follow-up with some actionable takeaways.
Much more in-depth, but with fewer guarantees, was Perplexity's article on mitigating prompt injection in their agentic browser Comet. An AI browser almost immediately fulfills the lethal trifecta, so there is a lot more work to do to ensure the browser can deliver a great AI experience for users without causing security concerns. This field of agent security is really just getting going.
Open-source safeguards
โOpenAI released gpt-oss-safeguard, two models fine-tuned from the original gpt-oss models for interpreting safety policies and using them to classify content. The difference here is that you can provide your policies at inference time rather than at training time, so you can be flexible and safe.
There are a lot of people out there trying to build the best coding agents, and I like to understand what they can do and whether you can generalize that to other agents. These articles on understanding all the features of Amp and using every Claude Code feature show some of those lesser-known features.
tmcp is an alternative TypeScript implementation of MCP with which you can build your own MCP servers. If you want a drag-and-drop way to build MCP servers, that's something Langflow can help you out with
โmcp2py lets you use any MCP server in your Python app, no agents required
โmcp_agent_mail gives your agents mail accounts to allow them to interact with one another. Just watch out in case their messages start getting passive aggressive, "As per my last email..."
If you want to make a website's llms.txt into an MCP server, then LLMText is the tool for you.
๐ฆ Langflow Spotlight
Today in the spotlight I want to talk about inputs. The Chat Input component is ubiquitous, often the entrance to any flow you want to interact with. It gets input text from the user, but you can also: choose whether to store those messages in memory, change the sender ID and name for multiparty conversations, and upload image files that you can use in the rest of your flow.
The chat input is for more than just idle chatter.
๐๏ธ Events
If you're in Portland or NYC, head along to the upcoming Hacking Agents meetups, and if you're anywhere else, make sure you're tuning into the OpenRAG summit online. Details for all the events are below:
November 6th, Portland, Oregon - at the Hacking Agents PDX meetup there will be talks on building agents, making agents enterprise-ready, and a real-world industry case study of agents in action.
November 10th, NYC, New York - meanwhile, at Hacking Agents NYC the talks will cover Langflow, Docling, CUGA, and much more.
November 13th, online - The OpenRAG Summit will dig into how to build the next generation of RAG applications with open technologies.
Jensen Huang has declared on a podcast that we have reached AGI. For a very specific definition of AGI that probably doesn't agree with what you might think AGI is. One would have thought that the afterglow of NVIDIA GTC would have provided enough hype for at least the rest of the month. Meanwhile, for those building agents, there has been a lot of talk about CLIs and Agent Skills, and this week we focus on evaluating skills to make sure they do what they are supposed to. WebMCP has been an...
Agents are starting to take on a life of their own, and as agent builders we need to consider the potential outcomes. The story of the autonomous agent that was denied when it opened a pull request to contribute to matplotlib and consequently wrote a hit piece on the maintainer had opinions on the internet veering between a fabrication or the beginning of Skynet. I think the lesson we should be taking away from this is that the the end user of an agent is not the only human that may come into...
The last couple of weeks has seen the explosion of OpenClaw (nรฉe ClawdBot), developers around the world have finally found the agent that acts like the AI they've been promised. I'm personally a little concerned over the security and privacy aspects of letting a powerful agent run wild with an all access pass to your computer and all your data, but I am excited to see the experimentation. It's fun, and maybe a little silly, to see the growth of social media for agents, with Moltbook providing...