正在加载视频...

视频加载失败

Looking for bulletproof security for AI agent access? Descope just changed the game with their Agentic Identity Hub 🔥 → MCP server authentication backing OAuth 2.1, PKCE, DCR, and CIMD → A secure vault stocked with 50+ templates and short-lived tokens → Strictly scoped, short-lived creds assigned to each...

24,647 次观看 • 4 个月前 •via X (Twitter)

0 条评论

暂无评论

原始帖子的评论将显示在这里

相关视频

HERMES AGENT WITHOUT TOOLS IS A CHATBOT. WITH THEM IT BUILDS 3D TOWERS IN BLENDER, CHECKS STOCK PRICES, AND DRIVES VS CODE. tonbi JUST DROPPED THE FULL GUIDE. module 6 of his 10-part Hermes masterclass. best breakdown of the tool layer anyone has published. what you need to know: TOOLS vs SKILLS vs MCP skills = instructions (markdown, loaded into context) tools = callable functions (Python, agent emits call, Hermes executes) MCP = adapters to external systems (Blender, Stripe, Linear, Notion) every tool has three parts: → the function (does the real work) → the schema (what the model sees to decide when to call it) → the registry (makes the tool exist in the agent) the model never runs the function directly. it emits a structured request (tool name + JSON args). Hermes executes and returns the result. if the tool fails, the error goes back as JSON. the agent recovers instead of crashing. TOOL SETS CONTROL THE SURFACE hermes chat --tool-sets web # only web tools loaded. no files, no terminal. hermes chat --tool-sets safe # read-only: web search, vision, image gen. # no file writes. no terminal. no code execution. mid-session: /tools enable video /tools disable terminal or toggle in the dashboard: hermes dashboard → Skills → Tool Sets MCP SERVERS two transport types: STDIO (local subprocess) or HTTP (remote endpoint). add a server: hermes mcp # or ask: "add the MCP server for Blender" filter tools with include/exclude per server. keep only what you trust. security: → OAuth 2.1 PKCE (no long-lived tokens in config) → package scanning via api.osv. dev before launch → all MCP calls go through approval gates HERMES AS MCP SERVER hermes mcp serve exposes 10 tools via FastMCP. connect VS Code Copilot or Cursor to your running Hermes instance. BUILD YOUR OWN TOOL He built a stock price tool live: → Python function calling Finnhub API → schema with name, description, parameters → registered in tool_sets.py → agent calls it automatically when relevant any repeating API call in your workflow can become a native tool. full Hermes architecture deep-dive in the article 👇

YanXbt

32,680 次观看 • 1 个月前

New course: MCP: Build Rich-Context AI Apps with Anthropic. Learn to build AI apps that access tools, data, and prompts using the Model Context Protocol in this short course, created in partnership with Anthropic Anthropic and taught by Elie Schoppik Elie Schoppik, its Head of Technical Education. Connecting AI applications to external systems that bring rich context to LLM-based applications has often meant writing custom integrations for each use case. MCP is an open protocol that standardizes how LLMs access tools, data, and prompts from external sources, and simplifies how you provide context to your LLM-based applications. For example, you can provide context via third-party tools that let your LLM make API calls to search the web, access data from local docs, retrieve code from a GitHub repo, and so on. MCP, developed by Anthropic, is based on a client-server architecture that defines the communication details between an MCP client, hosted inside the AI application, and an MCP server that exposes tools, resources, and prompt templates. The server can be a subprocess launched by the client that runs locally or an independent process running remotely. In this hands-on course, you'll learn the core architecture behind MCP. You’ll create an MCP-compatible chatbot, build and deploy an MCP server, and connect the chatbot to your MCP server and other open-source servers. Here’s what you’ll do: - Understand why MCP makes AI development less fragmented and standardizes connections between AI applications and external data sources - Learn the core components of the client-server architecture of MCP and the underlying communication mechanism - Build a chatbot with custom tools for searching academic papers, and transform it into an MCP-compatible application - Build a local MCP server that exposes tools, resources, and prompt templates using FastMCP, and test it using MCP Inspector - Create an MCP client inside your chatbot to dynamically connect to your server - Connect your chatbot to reference servers built by Anthropic’s MCP team, such as filesystem, which implements filesystem operations, and fetch, which extracts contents from the web as markdown - Configure Claude Desktop to connect to your server and others, and explore how it abstracts away the low-level logic of MCP clients - Deploy your MCP server remotely and test it with the Inspector or other MCP-compatible applications - Learn about the roadmap for future MCP development, such as multi-agent architecture, MCP registry API, server discovery, authorization, and authentication MCP is an exciting and important technology that lets you build rich-context AI applications that connect to a growing ecosystem of MCP servers, with minimal integration work. Please sign up here!

Andrew Ng

142,010 次观看 • 1 年前

New Course: ACP: Agent Communication Protocol Learn to build agents that communicate and collaborate across different frameworks using ACP in this short course built with IBM Research's BeeAI, and taught by Sandi Besen, AI Research Engineer & Ecosystem Lead at IBM, and Nicholas Renotte, Head of AI Developer Advocacy at IBM. Building a multi-agent system with agents built or used by different teams and organizations can become challenging. You may need to write custom integrations each time a team updates their agent design or changes their choice of agentic orchestration framework. The Agent Communication Protocol (ACP) is an open protocol that addresses this challenge by standardizing how agents communicate, using a unified RESTful interface that works across frameworks. In this protocol, you host an agent inside an ACP server, which handles requests from an ACP client and passes them to the appropriate agent. Using a standardized client-server interface allows multiple teams to reuse agents across projects. It also makes it easier to switch between frameworks, replace an agent with a new version, or update a multi-agent system without refactoring the entire system. In this course, you’ll learn to connect agents through ACP. You’ll understand the lifecycle of an ACP Agent and how it compares to other protocols, such as MCP (Model Context Protocol) and A2A (Agent-to-Agent). You’ll build ACP-compliant agents and implement both sequential and hierarchical workflows of multiple agents collaborating using ACP. Through hands-on exercises, you’ll build: - A RAG agent with CrewAI and wrap it inside an ACP server. - An ACP Client to make calls to the ACP server you created. - A sequential workflow that chains an ACP server, created with Smolagents, to the RAG agent. - A hierarchical workflow using a router agent that transforms user queries into tasks, delegated to agents available through ACP servers. - An agent that uses MCP to access tools and ACP to communicate with other agents. You’ll finish up by importing your ACP agents into the BeeAI platform, an open-source registry for discovering and sharing agents. ACP enables collaboration between agents across teams and organizations. By the end of this course, you’ll be able to build ACP agents and workflows that communicate and collaborate regardless of framework. Please sign up here:

Andrew Ng

105,343 次观看 • 1 年前

We’re excited to introduce AgentAuth—the comprehensive auth solution designed for AI agents! We understand the pain every developer experiences regarding authentication—managing OAuth flows for Gmail, handling API keys for Linear, or setting up permissions across multiple services. It's complex enough with traditional apps. However, AI agents add an extra layer of complexity. Traditional auth solutions were not designed with this agent-specific requirement in mind. Think about it—say you're building an agent to pull data from Salesforce, send updates through Slack, and log issues in GitHub. Each service requires different authentication—OAuth2, API keys, you name it—and your agent needs to work seamlessly on your users' behalf. Building and managing all that is a massive headache, right? That’s precisely where AgentAuth by comes in. • It supports 250+ apps across categories such as CRMs, ticketing, productivity, etc. • Compatible with 15+ Agentic Frameworks, including , LlamaIndex 🦙, CrewAI etc • Offers self-hosting and white-labeling options. • Provides a unified dashboard to monitor user accounts. It takes care of all the complex authentication flows—OAuth, API Key, Basic, JWT, token refresh, and more—in the backend, so you can focus on building what truly matters for your users. This is ideal for AI developers building real-world AI automation involving multiple application interactions. Check out AgentAuth now -

Karan Vaidya

110,979 次观看 • 1 年前

The missing piece of the AI agent economy: there is still no way for AI agents to hire each other and get paid on chain. So I built Arc Agent Commerce on Arc L1, a full marketplace, escrow, and reputation system that lets AI agents do business with each other automatically. Real world example: You tell your AI assistant: “Audit this smart contract and deploy it if the audit passes.” Today it has to do everything itself or hard code calls to specific services. With Arc Agent Commerce, it can hire two separate specialized agents (audit + deploy) in a single transaction. Money stays in escrow until each completes their part. How it works (in plain steps): 1. Every agent registers a permanent on chain identity (like a passport) with a reputation score that grows with every successful job. 2. Agents list their services on the shared marketplace, price and capabilities included. 3. A client creates a multi stage pipeline. The entire budget is locked in escrow in one upfront transaction. 4. Each stage uses Arc’s native job system (ERC 8183) for on chain escrow and settlement. 5. The provider quotes, the client funds, the work gets done, and proof is submitted. 6. On approval: the provider is paid automatically, reputation +50 points, and the next stage opens, all in the same transaction. 7. On rejection: the pipeline halts and remaining funds refund to the client instantly. The protocol doesn’t reinvent anything. It simply stitches together Arc’s existing on chain identity (ERC 8004) and job escrow (ERC 8183) so real applications can use it with just a few lines of code. Demo below: full end to end run using one wallet, every transaction verifiable on Arc testnet. → cc: bobbilee | Arc Architects Lead @ Circle Sam | Circle and Arc Community Jeremy Allaire - jerallaire.arc

RIDWAN

12,958 次观看 • 3 个月前

NEAR AI Ecosystem - “What Did You Ship This Week?” Ep. 9 A week of steady momentum across the NEAR AI stack. From Open Agent Alliance expansion and new agent standards to browser-native private data operators and OAuth-powered crossposting infrastructure, builders continue pushing open-source AI forward. Timestamps & Highlights: 00:00 – Intro by Cameron.near🇺🇸 from NEAR AI 01:36 – AVB from Open Agent Alliance (OAA) shares updates on the OAA. After its ETHDenver launch, OAA is ramping up with a renewed website, active working groups around agent discovery, secure communication, and decentralized payments. Their mission: build a truly open, interoperable agent ecosystem across Web3 and beyond. 09:18 – play_tingz unveils their AI-powered gaming creation platform. Using simple text prompts, users can instantly generate 3D games without coding. 18:44 – shudong from MIZU demos MIZU Agent, a browser-native AI operator that lives in your existing browser environment. It accesses private data securely without re-logins, supporting agent-native interactions like navigating social media and automating tasks locally. 28:53 – 𝕵𝖔𝖗𝖉𝖆𝖓✨🐾ヤᵇᵃ ͥ ꜝ9d from PublicAI introduces new features including live quizzes for contributor skill validation, Hot Wallet integration for seamless Web3 reward claims, and Discord Connect to strengthen expert communities. PublicAI continues expanding its decentralized data sourcing platform. 40:40 – elliot braem from open crosspost shows CrossPost, an OAuth-integrated platform letting NEAR accounts securely control social media posting. Users can sign actions with their wallets via function call access keys, enabling bots and agents to crosspost content without needing direct account access. 52:50 – Matt Lockyer from Proximity Labs announces the Bankr x Shade Agent hackathon. Developers are invited to extend BankerBot's functionality with new Shade Agents that leverage NEAR Chain Signatures for decentralized agent-to-agent transactions. Submissions open through May 3rd. 1:01:37 – Wrap-up by Cameron.near🇺🇸 with updates on upcoming NEAR AI releases, including auditor agents for discovery and security + private inference compute networks. The future is NEAR – the blockchain for AI. Catch the full replay:

NEARWEEK

30,822 次观看 • 1 年前

8 rules to improve your AI coding agent. All of these rules work with Claude Code, Cursor, VS Code, and with most programming languages. Automating these rules will 10x the code quality and security produced by your AI coding agents. 1. Dependency checks - Prevent your agent from suggesting insecure libraries based on outdated training data. 2. Secret exposure - Auto-fix the use of hardcoded credentials introduced by your coding agent. 3. File and function size - Automatically refactor any files or functions that exceed a reasonable length. 4. Complexity and parameter limits - Simplify overly complex code written by the agent. 5. SQL Injection - Auto-fix all database interactions with unsanitized user input. 6. Unused variables and imports - Detect and remove dead code. 7. Detect invisible unicode characters in AI rules files - Remove zero-width spaces, direction overrides, and other invisible characters that can hide malicious behavior. 8. Insecure OpenAI API usage - Enforce use of secure OpenAI endpoints, proper authentication, and context isolation Here is how you can automate this: Install the Codacy extension. This will give you access to a CLI for local scanning and an MCP server for agent communication. From here on out, every time you need to generate some code: 1. Your agent will write the code 2. It will then call Codacy's CLI to check it 3. It will find any issues in real time 4. Your coding agent will fix the issues 5. When the code passes all checks, you are done Level of effort on your side: literally zero! Code quality and security because of this: 100x better! Here is the link to download the extension for your IDE: Thanks to the Codacy team for collaborating with me on this post.

Santiago

49,331 次观看 • 9 个月前

Today I'm excited to share Sigilum! This is Payman's solution for Auditable Identity for AI Agents. (think One Password-ish but for AI Agents) I recorded a quick walkthrough showing how it all works (video below). This answers three pains we've seen within Financial Services (Banking) AI Agents we've built and OpenClaw🦞 AI Agents we deploy. Security, Auditability, and Control. 1. Security Making sure keys are secure and not just freely given to an AI Agent is a big deal. When working with money, you can't just expose these or skip putting controls in place. Sigilum provides a local gateway that prevents access to keys by the AI Agent without explicit authorization from a person. We provide namespaces through the service so you always know who authorized what key, for what service, to which agent. 2. Auditability If I could hit on the importance of this 100 times I would. It comes up in every financial services conversation. Sigilum provides you with the answer to "Who authorized this AI Agent to act on my behalf?" Audit logs trace back to the person, the service, and the AI Agent. With more audit logs being built through our managed service, this will be the key source for determining how an AI Agent is behaving on your behalf. This is needed for agents from OpenClaw, and especially for banking/money movement. 3. Control Revoke keys, limit access, grant authorization. All seemingly simple things, but complex to implement and make elegant. These controls dictate what the AI Agent can or cannot do. Sigilum allows you to do all of this through the managed Dashboard. We've made Sigilum open source and encourage others to contribute and keep building on the gateway. It's been a source of a lot of visibility and productization of AI Agents for us. We'll keep contributing and adding to it. Link in comments. If you want to try it out, we do have a managed service that makes it easy to spin up. Go to to sign up. Note: even though we've been pushing 100+ commits a day to get this out to folks, there are still some noticeable areas for improvement we're working on, which should get resolved soon (by us or you!): - Deeper audit trails - More providers (currently supports all OpenClaw providers) - Deeper scanning of existing keys your agent is hiding from you (we'll find them) - OpenClaw gateway persistence - Auto-purging keys - And more... If you want to contribute or have feedback, please DM or go to the GH. Happy building!

tyllen

18,497 次观看 • 5 个月前