From Tokyo to Amsterdam—and next, San Jose. AAIF Ambassador Lin Sun shares what she learned across two weeks of AGNTCon + MCPCon: the conversation is shifting from building agents to actually operating them in production. Read her take: lnkd.in/e6TAG5RZ Then keep the conversation going at AGNTCon + MCPCon NA, October 22–23 in San Jose—where Lin will be joining us again: lnkd.in/gSkG3yzZ

🏨 Heads up! The AGNTCon + MCPCon North America hotel block closes TODAY, September 25, at 11:59PM PDT. Grab your room at the San Jose Marriott before it's gone, and secure your stay for October 22-23 in San Jose. Get your pass and reserve your room: bit.ly/4vkntyD

MCP 2026-07-28 says a server must protect requestState integrity when it influences authorization, resource access, or business logic. It doesn't say where the keys live, how twelve stateless replicas agree on them, or what enforces "use this confirmation at most once." @mkoerbi follow-up walks through what the Python SDK covers by default and the three operational gaps it leaves open: - Shared key distribution across replicas - Key custody outside application memory - Single-use enforcement, which is a state problem no amount of cryptography on a stateless token solves The post pairs each gap with an OpenBao integration and a working example. bit.ly/4Aw0Ee3

Today at @WeAreDevs, Docker and the @linuxfoundation are announcing a collaboration around the Docker Sandbox Kit Specification: an open standard for declaring what an agent may do, where it may reach, and what it may touch. Open source under Apache 2.0. Read the deep dive: bit.ly/4rrcjql

This is the 101st edition of the Daily Agentic. We have been publishing 5x a week for four months now. Woot.

An enterprise wants an agent answering questions over sensitive records on its own infrastructure. The model provider wants its confidential weights usable only by an approved serving application. Both reasonable. The deployment question is how to make access to the model conditional on a verifiable release policy. A look at Weight Custody Manifest, an open pre-1.0 spec that keeps the release conditions beside the model. A manifest identifies the weights and carries a policy signed by builder and custodian. A runtime presents attestation evidence before the broker releases the key, and channel binding ties the release to the runtime that supplied the evidence. The practical distinction for agent-platform teams: permission to call an inference endpoint is not the same as permission for its runtime to unlock a particular model. Keep both decisions explicit. Full post by Imran Siddique: bit.ly/4yOQweM

Lunch + good conversation. Informal table discussions run both days at AGNTCon + MCPCon North America (October 22-23, San Jose, CA). Topics: MCP, agent identity, agentic commerce, security, agentic memory, and more. Open to anyone. Register for AGNTCon + MCPCon North America >> bit.ly/4vkntyD

MoonPay moves funds between fiat and digital assets for 30M+ customers and 900+ partners. When employees started connecting AI assistants to internal systems through MCP, browser-level governance stopped being enough. Their security team went to market with clear requirements: full visibility into MCP usage, coverage across Claude, Codex, Cursor, and Gemini, and the ability to block unsanctioned MCP servers at the point of use. Everything had to work in production immediately. They evaluated Speakeasy, an AAIF member, on a 30-day POC with success criteria written up front, then rolled it out company-wide in a single deployment. Today: 200+ MCP servers under governance, 60,000+ agent sessions, 5,000+ brokered MCP connections. Full writeup: bit.ly/4AAkrcy

Heading to MCP Dev Summit (5-6 October) with your team? 👥 Save 25% when you register 10+ people at once! Learn more + lock in your group rate today: bit.ly/4gGtq2D

AGNTCon + MCPCon. San Jose. October 22–23. What if you were in the room? Don't take our word for it. Listen to the community. Register: events.linuxfoundation.org/a…

Paste a URL, and your agent picks up new capabilities. That "paste and go" experience is more foundational than it looks. The vision behind MCP is that clients and servers with no prior relationship can still connect. A client developer shouldn't have to build a custom integration for every server, and a server operator shouldn't have to pre-register every client. The protocol gives strangers a shared way to start the conversation, even when access still requires signing in or approval. Not every MCP deployment lives in that open world. Enterprises often have pre-approved servers, gateways, and existing identity systems, and MCP extensions cover those cases. The distinction matters when deciding what belongs in the core protocol versus what belongs in an extension. Read the full post by @nbarbettini: bit.ly/3V4LBIc

Good lord...@Dpbrinkm can edit! Now i'm even more jazzed to be speaking at this. Come join him, and me, @dsp_, @techgirl1908, and lots more @AgenticAIFdn's AGNTCon in San Jose. Oh, and DM me if you want 10% off, I have a code!

Missed AGNTCon + MCPCon EU live? We’ve got you. Two days of agentic AI, MCP, open source, and what builders are actually working on right now — featuring voices from @AnthropicAI, @OpenAI, @AWS, @GoogleDeepMind, @HuggingFace, and more. - Day 1: bit.ly/4yfpWeY - Day 2: bit.ly/4iDyNlL Pick a day, hit play, and catch up.

2 weeks left to save >> bit.ly/4vkntyD Missing AGNTCon + MCPCon North America (Oct. 22-23) means missing 150+ technical sessions, hands-on workshops, keynotes from Anthropic, Google, O'Reilly Media, and MANY more, plus our AI Community Bash (Oct. 21). Join us in San Jose, CA! Register by October 7 and lock in savings!

Angie Jones has officially entered her protocol girly era. 💅🤖 Her take on WebMCP: what if tool calling lived directly in the web page itself? That gets especially interesting when you and your agent need to work together in the browser but for WebMCP to really take off, developers have to start building for it. Hear more from Angie and other builders pushing Agentic AI forward at AGNTCon + MCPCon NA: bit.ly/4vkntyD 📍 San Jose 📅 Oct. 22–23

🎓 Add an MCPA exam voucher to your MCP Dev Summit Toronto pass! Be among the first to earn this new vendor-neutral MCP credential — voucher just $285 CAD, 20% off for registrants. Add it now >> bit.ly/4gGtq2D

🧑‍🎓 Students, faculty + staff: MCP Dev Summit Nairobi has a special academic rate for you. Register for just KES 250 and join us 19-20 November for two days of technical learning with the MCP community. 🔗 bit.ly/4yOfOJU