Skip to content

MCP servers, extensions, ad-account automation

Connectors

17 items

What an assistant can reach once you connect it to something. MCP servers, extensions and connectors: what each one actually does, which credentials it asks for, and where the API behind it draws the line — including the ad platforms, where a version that expires takes working automation with it.

AI Chatbot Assistants on Glass Blocks, Artificial Intelligence Technology Concept. Digitally generated image. 3d render.
Connectorsstrong signal

The same SSRF bug turned up in MCP servers at Google, JPMorgan, and two governments

An independent researcher reported one class of server-side request forgery to five organizations that share no code, and all five confirmed and fixed it. Google's MCP Toolbox for Databases carried a high-severity CVE until version 1.5.0. Five US federal servers are still open. If you run an MCP server with any tool that fetches a web address, the four checks at the end apply to you.

Ars Technicaverified

Five Muse gadgets from Meta's repository: a round AMOLED board and a small stick device showing pixel avatars, the white Muse Home Link, a line drawing of a Raspberry Pi, and an e-ink display with a daily briefing.
Connectorsmedium signal

Meta open-sources Muse Gadgets, which lets its Muse agent run shell commands on a Raspberry Pi

Meta published the Muse Gadgets repository on October 2, 2026, under the Apache 2.0 license. It contains firmware for ESP32 boards and a Linux device SDK that turns a Raspberry Pi into a device its Muse agent can operate. On Linux, Muse runs shell commands with the permissions of the account you install it for, including sudo if that account has it. Meta's documentation says pairing has no manufacturer verification and cannot prevent an active man-in-the-middle attack.

Metaverified

Illustration of plugin extensions across the ChatGPT sidebar, settings, composer, conversation, and side panel.
Connectorsstrong signal

ChatGPT plugins can now run as sidebar apps and react to events from connected tools

OpenAI opened the interface layer it uses for its own ChatGPT features to outside developers. A plugin can now claim a place in the sidebar, open a panel beside a conversation, and act as the viewer for its own file types. A separate MCP Events integration lets a plugin start an automation when something happens in a connected app, which requires MCP 2.0 and webhook delivery. Sign in with ChatGPT lets a Plus or Pro allowance be spent in 16 partner tools.

OpenAIverified

Connectorsmedium signal

Anthropic opens a portal for submitting plugins to the Claude directory

Anthropic opened a submission portal for the Claude directory on September 25, 2026. Developers on paid Claude plans can submit a single MCP connector or a plugin bundle, follow its review, and see usage data once it is live. Existing listings need no changes.

Claude Blogverified

Connectorsmedium signal

Claude Tag can now use your own connectors when you ask it something in a Slack channel

Anthropic announced on September 24, 2026, that Claude Tag can use the connectors of the person who makes a request in a Slack channel. Until now it could reach only the connectors an administrator attached to the channel. The feature is rolling out on Team plans, with Enterprise to follow.

Claude Blogverified

Connectorsmedium signal

Willison's new plugin takes an API key through a web form, not through the agent

Simon Willison released llm-keys-ui 0.1 on September 20, 2026. The plugin serves a small page from the machine where LLM is installed, and a key typed into that page is saved straight into the key store. Nothing has to be pasted into the coding agent running on the same machine. The interface has no authentication, and the project tells the operator to stop the server once the keys are in.

Simon Willison's Weblogverified

Connectorsmedium signal

UN statistics now sit behind an MCP connection an agent can query itself

The UN system has opened the UN System Data Commons, a single knowledge graph built from statistics that used to live in separate agency silos. It is searchable in plain language at data.un.org, and it speaks the Model Context Protocol, so an agent can fetch a figure without a person opening a spreadsheet. Google states that every dataset was validated with UN statisticians. The stated goal is 80% of the system's statistical datasets by 2027.

Googleverified

Connectorsmedium signal

Gemini Spark now runs multi-step jobs on your Google Photos, and it can schedule them to repeat

Google has started making Google Photos available inside Gemini Spark, the mode of the Gemini apps that carries out a task instead of answering a question. One prompt can find photos, enhance copies of them, put them in a new album, and draft an email with the link. The same job can be attached to a schedule and left running in the background. It needs a Google AI Pro or Ultra subscription and a personal account rather than a work or school one, and the Photos part is limited to people 18 or over in the United States, in English.

Googleverified

Connectorsmedium signal

Amazon Bedrock adds a ServiceNow connector and scheduled syncs to its managed knowledge bases

AWS published three changes to Amazon Bedrock Managed Knowledge Base on September 4, 2026. ServiceNow becomes a native data source, so knowledge articles and service catalog items are crawled without a custom ingestion pipeline. SharePoint, OneDrive, and Confluence can now be connected by signing in with your own credentials instead of waiting for an IT-issued service account. Sync scheduling arrives for every native connector, at daily, weekly, or monthly intervals.

AWSverified

Connectorsmedium signal

The AWS MCP Server can now diagnose a Lambda function and the seven services around it

AWS published the serverless diagnostic capability on September 4, 2026. A coding agent connected to the AWS MCP Server can inspect a Lambda function together with its connected resources across seven services, compare error signals against a 7-day baseline, read deployment configuration, and analyze latency. It costs nothing extra. The server itself runs in only two regions, even though it reaches services in every commercial region.

AWSverified

Connectorsmedium signal

ChatGPT for Healthcare now connects to Epic records and nine official public health sources

OpenAI announced an Epic integration and a Healthcare Public Data plugin for ChatGPT for Healthcare on September 1, 2026. A clinician can bring authorized patient context into ChatGPT instead of reading across notes, labs, medications and specialist documentation. The EHR integration is not available to individual accounts. Every accuracy figure in the announcement comes from an evaluation OpenAI itself organized.

OpenAIverified

Connectorsmedium signal

AWS Agent Registry is generally available and answers as an MCP server

AWS took Agent Registry out of preview on August 31, 2026. It is a private catalog of the agents, tools, skills, MCP servers, and custom resources an organization already runs, with search, approval, and audit trails on top. General availability adds provisioning as code, cross-account sharing, and automatic detection of agents running on AgentCore. The registry is also exposed as an MCP server, so an assistant in an editor can query it during a task.

AWSverified

Connectorsmedium signal

ChatGPT now reads and sends your Apple Messages, on the Mac only

A plug-in in the ChatGPT desktop app reads and searches your iMessage, SMS and RCS threads and sends messages through Messages on your behalf, but only in Codex and in ChatGPT Work, not in ordinary ChatGPT chat. By default nothing goes out until you approve both the text and the recipients. There is a switch that removes that step, and OpenAI's own documentation argues against using it.

OpenAIverified