Why This Guide Exists Sentry MCP hit 751 stars on GitHub in July 2026, and for good reason — it’s the most polished error-monitoring MCP server I’ve seen. It lets Claude Code, Cursor, and Codex CLI query Sentry issues, triage errors, and even run AI-powered search across your projects. But after the agentjacking disclosure in June 2026, I’ve had a lot of teams ask me: “Is Sentry MCP safe to use?” ...
Your coding agent trusts the tools it reads. That trust is the vulnerability. When an attacker poisons a Sentry error report, a Datadog monitor alert, a PagerDuty incident, or a Jira ticket description with hidden prompt injection payloads, your agent doesn’t know the difference between a legitimate instruction and a hijack attempt. I’ve spent the last few months digging into this attack surface across the four most common integrations teams wire up to Claude Code, Cursor, and Codex. Here’s what I found and exactly how to fix it. ...
What Is Agentjacking? In June 2026, researchers at Tenet Security disclosed a new attack class they called agentjacking — and it’s the most practical AI agent supply chain attack I’ve seen in production. The premise is deceptively simple: an attacker injects a malicious error event into your Sentry project, and when your AI coding agent (Claude Code, Cursor, or OpenAI Codex CLI) reads that event via the Sentry MCP server, it executes the attacker’s embedded payload with your system privileges. ...
If you’re running more than a handful of MCP-backed agents in production, you’ve already hit the wall: point-to-point connections between every agent and every MCP server create an N×M integration nightmare, credential sprawl, and zero visibility into who’s calling what. AWS’s answer in 2026 is a two-layer governance stack — Bedrock AgentCore for per-agent MCP server integration and access control, and the A2A Gateway for centralized agent registry, discovery, routing, and rate limiting across your entire fleet. Here’s how to set it up, what each piece actually does, and where the sharp edges are. ...
If your coding agents can’t see your artifact repository, they’re flying blind. They’ll guess dependency versions, hallucinate package names, and suggest upgrades that don’t exist. But giving an AI agent direct access to Artifactory is a bad idea — one prompt injection and your entire binary repository is an attack surface. JFrog solves this with two complementary paths: JFrog Skills (open-source agent skills) and the JFrog MCP Server (remote SaaS MCP server). Both give agents safe, governed access to artifact context, but they work differently and suit different use cases. Here is how both work, when to use each, and how to set them up without compromising security. ...
If your team is running AI coding agents in production — Claude Code, Cursor, Windsurf, GitHub Copilot — you’ve probably already felt the gap between traditional AppSec and what these agents actually do. Traditional security tools scan committed code. Agents don’t just write code; they install MCP servers, download skills, run shell commands, and make API calls. By the time a traditional SAST scan runs, the damage is already done. ...
SonarQube MCP Server is SonarSource’s official open-source bridge between AI coding agents and SonarQube’s code quality engine. Instead of context-switching to a browser dashboard or running CLI scans manually, your AI agent can query issues, check quality gates, analyze code snippets, review security hotspots, and even change issue status — all through MCP tool calls. Version 1.19.0 ships with 20+ tools, supports every major AI client from GitHub Copilot to Claude Code, and works with both SonarQube Cloud and self-hosted Server instances. ...
AI coding agents ship code faster than ever, but when they break, the debugging experience is nothing like a traditional stack trace. You don’t get a line number and a segfault — you get a silent hang, a garbled terminal, a 529 from the API, or an MCP server that just won’t connect. After spending the last year running Claude Code, Codex CLI, GitHub MCP Server, and Playwright MCP in production pipelines, I’ve collected the debug patterns that actually work. Here’s the field guide I wish I’d had. ...
Dataverse is becoming Microsoft’s governed data and tool layer for enterprise agents: records, metadata, security roles, semantic models, Business Skills, and MCP endpoints in one place. For developers, the practical question is no longer “can my agent reach Dataverse?” It is “which Dataverse interface should this workflow use, and how do I keep it governed?” What does Microsoft mean by Dataverse as an agent data platform? Microsoft’s 2026 positioning is more specific than the older “Dataverse is a business data store” message. The new claim is that Dataverse can give agents business understanding, not just API access. That means an agent should be able to discover tables, understand relationships, respect role-based security, call reusable business processes, and operate through approved tools. ...
The Cursor 3.9 Customize page, shipped June 22, 2026, replaces scattered JSON config files and settings panels with one unified UI for managing plugins, MCP servers, skills, subagents, rules, commands, and hooks. Instead of editing mcp.json by hand or hunting through tabs for rule files, you now open a single sidebar panel and manage every extension category from one place. This guide walks through every feature — scope levels, the plugin marketplace, team leaderboards, MCP server management without JSON, and the new plugin format — so you can configure Cursor for yourself or your entire team in minutes. ...