The gh actions-lock CLI extension writes .github/workflows/actions.lock, pinning every action (transitive ones included) to a reviewed commit, so a moved or hijacked tag can't swap in new code; Dependabot updates the lock in the same PR. It's in preview for GitHub Enterprise Cloud, with an optional Require lockfile policy for admins.
Version 1.13.0 of the Chrome DevTools MCP server lets agents place logpoints and stub individual requests with page scoped network mocks. Upstream mock responses can also pass the real request through…
Maxon's free Autograph 2027.0 includes an MCP server, off by default, that lets Claude Desktop, ChatGPT Desktop or a local model drive the app's own tools. Edits are ordinary project data and can be undone…
Announced Nov 14, the server lets agents audit policies, detect drift and manage exemptions across a Google Cloud org. Gemini can also draft and dry run custom constraints from plain English…
SitecoreAI's Developer MCP server is in beta with 13 tools for component development, content modeling and content creation. It connects to Cursor, Claude Code, Codex, VS Code and OpenCode via MCP OAuth…
Announced Nov 13, the MIT licensed proxy sits between an agent and its MCP tools and allows, blocks, modifies or pauses each call for approval. Every decision goes into a hash chained audit log, and it installs from PyPI as vaikora guard mcp…
Spotted something we missed? Start a thread.