Epherem launched as a free source code security scanner for applications built with AI that checks authentication, database access, exposed API keys, and vulnerable packages. It lets you start scans by uploading a ZIP or connecting a GitHub repository. Users now get plain-English findings with suggested fixes and paste-ready prompts for AI coding assistants, plus exportable reports that include issues the scanner can’t fully verify.
ExcaliClaw launched a collaborative, hand-drawn diagram workspace with real-time co-drawing, sharing, and search. The free plan includes 200 drawings with unlimited AI (MCP) use and no credit card. Its MCP server now lets tools like Claude, Cursor, and VS Code create and edit diagrams, with paid plans starting at €9/month adding more features.
Manifold launched a hosted MCP server that supplies agents with live marketing data across channels for tools like Claude, ChatGPT, and Cursor. The page claims it’s starting with “40 followers” and positions the service as free to start. As a result, users can query marketing info in plain words through their agent instead of manually juggling multiple tabs.
Anthropic’s OSS Scanner has generated 29,000 candidate vulnerabilities in widely used open source projects, overwhelming the human review and patching pipeline. As of October 2, only 516 vulnerabilities had been patched upstream despite 5,674 of 6,123 reviewed findings being confirmed valid. Anthropic responds by sending many scanner reports directly to maintainers through an optional fast-track that bypasses Anthropic validation, changing the workflow from a backlog-based process to faster, maintainer-led triage.
Dropstone CLI launched as a command-line coding agent that reads a repo, edits files, runs commands/tests, and asks to proceed. It launched today and lists 28 followers. You can correct it once and it keeps that behavior across sessions, with options like Fast/Pro/Heavy models and it can open a pull request from a GitHub issue.
SupoClip launched an open-source tool that turns long videos into vertical, captioned short clips using transcription, moment selection, and virality scoring. It scores and selects the strongest 15–60s segments for cropping to 9:16 around the speaker. Users can now self-host for free under AGPL-3.0 or use the web app, iPhone app, REST API, or MCP server to export to TikTok, Reels, and Shorts without watermarks.
Cube forms launched today as a free form builder designed for AI agents to create and submit forms via MCP or plain HTTP without a browser or CAPTCHA. The single concrete detail is that it is free. As a result, AI agents from tools like Claude Code and ChatGPT can fill forms end-to-end while humans can still open the same link to review, edit, or submit the form.
Every AI story that matters,
in your inbox by 8am.
TLDRocket reads all relevant sources, removes duplicate coverage, and summarises the
day in two minutes. Follow companies and topics for alerts, or get the
briefing in Slack. Free, no spam, unsubscribe anytime.
Reading TLDRocket needs no cookies, and the readership counts we rely on come from
our own cookieless analytics. Google Analytics is the exception: it sets cookies and
reports to Google, so it stays switched off until you allow it. You can change your
mind any time from “Cookie settings” in the footer.
Strictly necessary
Session security and form protection (tldrocket-session,
XSRF-TOKEN, 2 hours). The site cannot work without them,
so they need no consent.
Always on
Google Analytics 4 (_ga,
_ga_<id>, up to 2 years). Measures which
stories and sections readers use. Google acts as a third-party processor and may
store the data outside the EU. No advertising, no profiling, no data sold.