Blog
Guides for building with agents safely
Security, MCP servers, agent skills and selling, explained in plain English.
AI Agent Security
How to tell whether an AI agent is safe before you give it access to your files, keys and accounts.
Complete guideAI Agent Security: How to Vet an Agent Before InstallA practical guide to AI agent security. Learn how to vet an AI agent, MCP server or skill before install: code checks, sandboxing, scoped keys and red flags.9 min readPrompt Injection in AI Agents: Risks, Examples, DefencesHow prompt injection hijacks tool-using AI agents through web pages, emails and documents, with real examples and mitigations that reduce the damage.9 min readLeast Privilege for AI Agents: Keys, Sandboxes, ApprovalsApply least privilege to AI agents: scope API keys and tokens, limit filesystem and network access, use sandboxes, and require approval for risky actions.10 min readAI Agent Security Checklist: 15 Checks Before and AfterA printable AI agent security checklist for agents, MCP servers and skills: install-time checks, runtime monitoring, ownership and offboarding, mapped to OWASP.9 min readAI Agent Supply Chain Attacks: Malicious Packages GuideHow AI agent supply chain attacks work: malicious npm and PyPI packages, typosquatting, compromised dependencies and install scripts, plus how to defend.
MCP Servers
What MCP servers are, how to install them in your AI apps, and how to vet one before you trust it.
Complete guideMCP Server Security: How to Vet a Server Before You Use ItA practical guide to MCP server security. Check the code, dependencies, tool descriptions, network traffic and permissions before you connect a server.6 min readSearch MCP Servers From Claude Code, Cursor or VS CodeAdd one free MCP server and your AI app can search 5,000+ agents, MCP servers and skills, check what each can touch, and install it from the command line.13 min readBest MCP Servers in 2026: 11 Picks for Claude Code and CursorThe best MCP servers in 2026 by job: docs, browser, GitHub, code, databases, files, search, design and observability, with dated stars and install commands.8 min readMCP vs API: What Is Different and When You Need EachMCP vs API explained with real calls: an API serves code you write, MCP lets an AI app find and use tools. Updated for the July 2026 MCP spec.9 min readMCP Tool Poisoning: Malicious Descriptions and Rug PullsHow MCP tool poisoning works: hidden instructions in tool descriptions, rug pulls after approval and tool shadowing, plus practical ways to defend against it.10 min readLocal vs Remote MCP Servers: stdio vs Streamable HTTPLocal vs remote MCP servers explained: how stdio and Streamable HTTP work, how OAuth authorization fits in, the security trade-offs, and when to choose each.10 min readHow to Install an MCP Server in Claude, Cursor and VS CodeAdd an MCP server to Claude Desktop, Claude Code, Cursor and VS Code. Exact config file paths, JSON formats and CLI commands, plus quick safety checks.11 min readBuild an MCP Server in TypeScript: Step-by-Step GuideBuild a working MCP server with the official TypeScript SDK, test it with MCP Inspector, connect it to Claude, then declare network access and get it scanned.
Agent Skills
How skills teach agents new jobs, how to write one, and how they compare with MCP servers.
Complete guideAgent Skills Explained: What They Are and How They WorkAgent Skills are folders with a SKILL.md file that teach AI agents new tasks. Learn how they load, where they run, security risks, and how to install them.7 min readAI Coding Agent Latest News 2026: What Shipped from 7 to 14 NovemberEvery stable release of Claude Code, Codex CLI, Copilot CLI, Gemini CLI, OpenCode and goose from 7 to 14 November 2026, with changelog links.9 min readSKILL.md vs AGENTS.md: Which File Does What and WhenAGENTS.md is always-on project guidance for coding agents; SKILL.md is a skill your agent loads only when a task needs it. Rules, examples and test data.10 min readSKILL.md Format Explained: Frontmatter, Folders and LimitsA field-by-field guide to the SKILL.md format: required and optional frontmatter, folder layout, bundled scripts, size limits and real examples.12 min readHow to Write an Agent Skill: Build and Test a SKILL.mdBuild a working Agent Skill step by step: write SKILL.md, add a script, write a description that triggers, test it, then publish it to GitHub for a free scan.11 min readBest Claude Skills for Websites: Landing Pages and WCAGThe best Claude skills for websites: landing page reviews, conversion copy, WCAG 2.2 accessibility checks and frontend design, with a security note for each.10 min readBest Claude Skills for Stock Trading and Research (2026)Real Claude skills for stock trading and market research, with live GitHub stars, licenses, and the scripts, API keys and network access each one needs.12 min readBest Claude Skills for Social Media Content in 2026The best Claude skills for social media: repurposing, hooks, brand voice, calendars and analytics, with install lines, a security note each and ethics rules.12 min readBest Claude Skills for SEO: Audits, Keywords and BriefsThe best Claude skills for SEO in 2026: site audits, keyword clustering, content briefs and schema, with install lines, licenses and a security note for each.11 min readBest Claude Skills for Job Seekers: Resumes and InterviewsReal Claude skills for resumes, cover letters and interview prep, with live GitHub stars and licenses, a full application workflow, and honesty rules.13 min readBest Claude Skills in 2026: Popular Agent Skills CheckedThe most-starred Claude Agent Skills in 2026 by use: coding, documents, design, marketing, research, career and trading, with a security note for each.10 min readAgent Skills vs MCP Servers vs Subagents: When to Use WhichSkills teach an agent how to do a task, MCP servers connect it to outside systems, and subagents split work. Learn when to use each and how to combine them.
AI Agents
The open-source AI agents worth running, how to compare them, and what each one can touch.
Agent Protocols
A2A, ACP, x402, AP2, MCP Apps, MCP gateways and mobile agents: the projects to build on and how to choose.
11 min readWhat Is the A2A Protocol? How AI Agents Work With Other AgentsA2A (Agent2Agent) is an open protocol that lets agents from different teams find each other and share tasks. Agent cards, tasks, v1.0 changes and A2A vs MCP.11 min readBest x402 and AP2 Tools for AI Agent Payments: x402 SDK Picks for 2026The x402 SDKs and AP2 projects worth building on in 2026, with stars, licences and setup from each README, plus x402 vs AP2 in one table.11 min readBest Mobile MCP Servers and AI Agents for Android and iOSEight open-source mobile MCP servers and phone agents compared: Android and iOS support, real devices vs emulators, setup and stars as of November 2026.11 min readBest Open-Source MCP Gateways and Proxies in 2026, ComparedEight open-source MCP gateways compared on auth, tool filtering, audit logs, rate limits and licence, plus three MCP proxies for transport bridging.11 min readBest MCP Apps SDKs and Examples: Build Interactive UI for MCP ServersEight MCP Apps SDKs, frameworks and starters compared by language, hosts, stars and licence, with setup steps and the AI apps that render MCP Apps.11 min readBest ACP Coding Agents for Zed, JetBrains and NeovimSix Agent Client Protocol picks for Zed, JetBrains and Neovim, with stars, licences and setup from the official docs, as of 12 November 2026.10 min readBest A2A Protocol SDKs and Frameworks to Build On (2026)The A2A protocol SDKs and agent frameworks worth building on, by language: official or community, spec version, stars, licence and install command.
Selling Agents
Turning an open-source agent, MCP server or skill into income: pricing, listing and trust.
Complete guideHow to Sell MCP Servers, AI Agents and Agent SkillsHow developers sell MCP servers, agents and skills: business models, marketplaces and their fees, licensing, pricing, trust signals and payments.9 min readPricing AI Agents and MCP Servers: Models and ExamplesHow to price AI agents, MCP servers and skills: one-time vs subscription vs usage pricing, anchoring, free tiers, and a simple way to pick a first price.11 min readOpen Core Model for AI Agents: Licenses and Dual LicensingHow to turn an open-source agent or MCP server into a paid offering without alienating users: open core, pro features, MIT vs Apache vs AGPL, dual licensing.10 min readGet Your MCP Server Discovered: Registry and DirectoriesGet your MCP server, agent or skill found: write a better README, add server.json or SKILL.md, publish to the MCP Registry, use GitHub topics and show trust.