Bookmarks

StdoutトランポートのMCPサーバー起動コマンドを設定ファイルにnpxやuvxで記述することは、MCPサーバー接続時に、その場でダウンロードしたスクリプトファイルを実行することを意味する。これは開発者にはお馴染みの危険な方法「curlしてbash（URLでダウンロードしてきたシェルスクリプトをノールックで実行）」と似ている。MCPセキュリティの話題は“面白”優先でプロンプトインジェクション方面に偏りがちだが、それ以前にこの実行方式にも問題がある。 * The Dangers of curl | bash MCPにはRootsというパスベースでアクセスを管理できる、いかにも安全に配慮した仕様があるが、現実としてはMCPクライアント側が対応していない。Claude Desktopですら未実装だ。 より安全なMCPサーバー なので著者としてはより安全なMCPサーバーの実行方法を求めている。MCPサーバーのサンプルには、PythonやTypeScriptだけでなく、Brave SearchなどDocker Hubを経由して実行するものもある。これはコンテナを起動してその中で実行す

Core building blocks for AI apps. High-quality, accessible, and customizable components for AI interfaces. - ibelick/prompt-kit

Core building blocks for AI apps. High-quality, accessible, and customizable components for AI interfaces.

UI - Project management interface inspired by Linear. Built with Next.js and shadcn/ui, this application allows tracking of issues, projects and teams. - ln-dev7/circle

From QED to Neovim, this blog post unveils the history and evolution of the digital text editor. Modern systems require a method to precisely select, input, and arrage text. It's natural that this tool should become indispensable.

Ditch IDEs like Intellij and glorified text editors like Eclipse, and switch to a real IDE, MS Paint.

The plugin allows you to hide and show comments, and saves them to a specified folder. - jiangxue-analysis/vscode-comment-hide

Comments, second only to "Hello, world!" in programming, are usually the next thing you learn after...

Extension for Visual Studio Code - A whole dev team of AI agents in your editor.

LakyAI

Learn how to quickly check if a value exists in a ridiculously large collection of data by using the world's favorite little probabilistic data structure, the Bloom filter.

CircleCI’s CI-focused MCP server gives AI assistants direct access to your pipelines so they can retrieve logs, analyze failures, and suggest fixes, all in natural language.

A specialized server implementation for the Model Context Protocol (MCP) designed to integrate with CircleCI's development workflow. This project serves as a bridge between CircleCI's infra...

As it turns out, OpenAI’s rate limits are a little more complicated than other APIs.

Learn how to identify which CVE Numbering Authority is responsible for the record, how to contact them, and what to include with your suggestion.

An Open Source Cross-platform Desktop AI Assistant and MCP (Model Context Protocol) Client.Support local knowledge base and custom prompt library.

MySQL comes to Cloudflare Workers and Hyperdrive: your favorite MySQL drivers and ORMs are now compatible with the Workers runtime, and Hyperdrive allows you to connect to your regional database from Workers with optimal performance.

This memo defines a path prefix for "well-known locations", "/.well-known/", in selected Uniform Resource Identifier (URI) schemes. In doing so, it obsoletes RFC 5785 and updates the URI schemes defined in RFC 7230 to reserve that space. It also updates RFC 7595 to track URI schemes that support well-known URIs in their registry.

llms.txt is a standard for LLMs to discover and read your website. Users can use LLMs like Claude or Cursor to talk with your docs, improving their experience.

Synchronous layout work as part of JavaScript execution can slow down website rendering and delay user interactions. Learn how to identify and fix forced reflows.

5ire is a cross-platform desktop AI assistant, MCP client. It compatible with major service providers, supports local knowledge base and tools via model context protocol servers . - nanbingxyz/5ire

Crosspost is a small utility I wrote to post across social media networks. It now includes an MCP server for use with AI agents.

Automate API documentation in Rails with OasRails and its AI-optimized documentation (llms.txt). Effortlessly generate OpenAPI specifications and accelerate your workflow with language models.

Después de buscar una herramienta definitiva para documentar las API que desarrollo con Rails, que fuera simple, interactiva y fácil de usar, y no encontrar la adecuada, decidí crear la mía propia: OasRails.

Generate Automatic Interactive Documentation for Your Rails API - a-chacon/oas_rails

OpenAPI Diff and Breaking Changes. Contribute to oasdiff/oasdiff development by creating an account on GitHub.

When can an implementation-first approach to documentation be preferred over documentation-first? Find the answer, and see how to do it with an existing application by leveraging some tools in some unexpected ways (including Martian ones!) Plus, AI-assisted migration tips.

Smithery AI is a registry and management platform for Model Context Protocol (MCP) servers.

Take a look at the top 10 status page tools in 2025 — from legacy platforms to modern, dev-first options.

JavaScriptのArrayBufferはWebGLなどでまとまったバイナリデータを扱う際に使用されています。ArrayBufferという用語だけ聞くとピンとこない人もいるかもしれません。