Skip to content
What are you looking for?. Open searchSR

Tags

Connectors

15 items
AI Chatbot Assistants on Glass Blocks, Artificial Intelligence Technology Concept. Digitally generated image. 3d render.
Connectorsstrong signal

The same SSRF bug turned up in MCP servers at Google, JPMorgan, and two governments

An independent researcher reported one class of server-side request forgery to five organizations that share no code, and all five confirmed and fixed it. Google's MCP Toolbox for Databases carried a high-severity CVE until version 1.5.0. Five US federal servers are still open. If you run an MCP server with any tool that fetches a web address, the four checks at the end apply to you.

Ars Technicaverified

Five Muse gadgets from Meta's repository: a round AMOLED board and a small stick device showing pixel avatars, the white Muse Home Link, a line drawing of a Raspberry Pi, and an e-ink display with a daily briefing.
Connectorsmedium signal

Meta open-sources Muse Gadgets, which lets its Muse agent run shell commands on a Raspberry Pi

Meta published the Muse Gadgets repository on October 2, 2026, under the Apache 2.0 license. It contains firmware for ESP32 boards and a Linux device SDK that turns a Raspberry Pi into a device its Muse agent can operate. On Linux, Muse runs shell commands with the permissions of the account you install it for, including sudo if that account has it. Meta's documentation says pairing has no manufacturer verification and cannot prevent an active man-in-the-middle attack.

Metaverified

Fifteen app icons in a grid, including Shopify, Slack, Notion, Figma, Stripe, Dropbox, Box, Canva, QuickBooks, Asana and Zoom, with the Muse mascot holding up a USB cable.
Agentsstrong signal

Meta extends Muse to small businesses while the agent hands one user's home address to a stranger

Meta announced Muse for Small Business on September 29, 2026: the agent now connects to 15 named services, from Shopify and Stripe to QuickBooks and Slack, plus Facebook, Instagram and Meta ad accounts. It is free for most uses, with subscription plans the post does not price, and it is available in the United States and Canada. The same day, The Verge reported that Muse had given a YouTuber's home address to a stranger on Facebook Marketplace after he chose the permanent permission option. Meta says nothing publishes, sends, or spends without approval; the incident shows what one approval can cover.

Meta Newsroomverified

Connectorsstrong signal

ChatGPT plugins can now run as sidebar apps and react to events from connected tools

OpenAI opened the interface layer it uses for its own ChatGPT features to outside developers. A plugin can now claim a place in the sidebar, open a panel beside a conversation, and act as the viewer for its own file types. A separate MCP Events integration lets a plugin start an automation when something happens in a connected app, which requires MCP 2.0 and webhook delivery. Sign in with ChatGPT lets a Plus or Pro allowance be spent in 16 partner tools.

OpenAIverified

Connectorsmedium signal

Anthropic opens a portal for submitting plugins to the Claude directory

Anthropic opened a submission portal for the Claude directory on September 25, 2026. Developers on paid Claude plans can submit a single MCP connector or a plugin bundle, follow its review, and see usage data once it is live. Existing listings need no changes.

Claude Blogverified

Connectorsmedium signal

Claude Tag can now use your own connectors when you ask it something in a Slack channel

Anthropic announced on September 24, 2026, that Claude Tag can use the connectors of the person who makes a request in a Slack channel. Until now it could reach only the connectors an administrator attached to the channel. The feature is rolling out on Team plans, with Enterprise to follow.

Claude Blogverified

Connectorsmedium signal

UN statistics now sit behind an MCP connection an agent can query itself

The UN system has opened the UN System Data Commons, a single knowledge graph built from statistics that used to live in separate agency silos. It is searchable in plain language at data.un.org, and it speaks the Model Context Protocol, so an agent can fetch a figure without a person opening a spreadsheet. Google states that every dataset was validated with UN statisticians. The stated goal is 80% of the system's statistical datasets by 2027.

Googleverified

Connectorsmedium signal

Gemini Spark now runs multi-step jobs on your Google Photos, and it can schedule them to repeat

Google has started making Google Photos available inside Gemini Spark, the mode of the Gemini apps that carries out a task instead of answering a question. One prompt can find photos, enhance copies of them, put them in a new album, and draft an email with the link. The same job can be attached to a schedule and left running in the background. It needs a Google AI Pro or Ultra subscription and a personal account rather than a work or school one, and the Photos part is limited to people 18 or over in the United States, in English.

Googleverified

Connectorsmedium signal

Amazon Bedrock adds a ServiceNow connector and scheduled syncs to its managed knowledge bases

AWS published three changes to Amazon Bedrock Managed Knowledge Base on September 4, 2026. ServiceNow becomes a native data source, so knowledge articles and service catalog items are crawled without a custom ingestion pipeline. SharePoint, OneDrive, and Confluence can now be connected by signing in with your own credentials instead of waiting for an IT-issued service account. Sync scheduling arrives for every native connector, at daily, weekly, or monthly intervals.

AWSverified

Connectorsmedium signal

The AWS MCP Server can now diagnose a Lambda function and the seven services around it

AWS published the serverless diagnostic capability on September 4, 2026. A coding agent connected to the AWS MCP Server can inspect a Lambda function together with its connected resources across seven services, compare error signals against a 7-day baseline, read deployment configuration, and analyze latency. It costs nothing extra. The server itself runs in only two regions, even though it reaches services in every commercial region.

AWSverified

Connectorsmedium signal

ChatGPT for Healthcare now connects to Epic records and nine official public health sources

OpenAI announced an Epic integration and a Healthcare Public Data plugin for ChatGPT for Healthcare on September 1, 2026. A clinician can bring authorized patient context into ChatGPT instead of reading across notes, labs, medications and specialist documentation. The EHR integration is not available to individual accounts. Every accuracy figure in the announcement comes from an evaluation OpenAI itself organized.

OpenAIverified

Connectorsmedium signal

AWS Agent Registry is generally available and answers as an MCP server

AWS took Agent Registry out of preview on August 31, 2026. It is a private catalog of the agents, tools, skills, MCP servers, and custom resources an organization already runs, with search, approval, and audit trails on top. General availability adds provisioning as code, cross-account sharing, and automatic detection of agents running on AgentCore. The registry is also exposed as an MCP server, so an assistant in an editor can query it during a task.

AWSverified