SShortSingh.

Programming

0
ProgrammingDEV Community ·

MCP Embedding Levels Explained: Read-Only, Actions, and Agent-Resident Compared

A technical guide outlines three distinct levels at which MCP applications can embed within AI clients, each defined by what actions an AI agent is permitted to take. The read-only level allows agents only to query data without making changes, costs roughly $100K–$300K, and takes about one quarter to ship. The actions level permits agents to create, update, delete, or send data, demands stronger safety infrastructure, and typically costs $300K–$700K over two quarters. The agent-resident level treats the AI agent as a full product user with its own identity and state, requiring a multi-quarter rebuild costing over $1 million. Experts recommend most teams start with read-only, graduate to actions only when safety measures are solid, and pursue agent-resident only if rebuilding the entire product around an agent-first model.

0
ProgrammingDEV Community ·

GitHub Always Grants Highest Permission When Users Belong to Multiple Teams

GitHub follows a 'highest wins' rule, meaning users who belong to multiple teams automatically receive the most permissive access level assigned to any of those teams for a given repository. For example, a developer in a team with 'maintain' access and another with 'triage' access will effectively operate at the 'maintain' level. This rule applies regardless of whether access is granted through teams, direct collaborator assignments, or organization-wide settings. However, GitHub currently offers no native 'My Permissions' page for standard members to view their computed access level, a gap that can cause confusion and slow workflows. As a workaround, users can check for the presence of the repository's Settings tab, or ask an Organization Owner or Repository Admin to look up their effective permissions directly.

0
ProgrammingDEV Community ·

GitHub Contribution Graph May Miss Commits Due to Email Mismatch Across OS

A GitHub community user named badisso22 flagged a discrepancy where over 30 commits made in a single day appeared as only 10 on their profile, consistently occurring when committing from Windows via Boot Camp on a Mac. Community member amasen02 identified the root cause: GitHub's contribution graph tracks commits by the author email embedded in the Git commit object, not by the account used to authenticate the push. Each operating system maintains its own Git configuration file, so a Windows environment may default to an unverified or mismatched email that GitHub cannot link to the user's primary profile. The fix does not require rewriting Git history — users simply need to identify the email address used in the missing commits via git log, then add and verify that address under GitHub Settings → Emails. Once verified, past unlinked commits are automatically reflected in the contribution graph.

0
ProgrammingDEV Community ·

Browser-Native Tool Reconciles ePOS and ERP Data Without Uploading to Servers

Developers working with retail and enterprise systems often struggle to match sales records from ePOS platforms against large ERP databases like SAP or Oracle. A browser-first approach using JavaScript allows nested data arrays to be flattened and cross-referenced entirely on the client device, without any server involvement. The method uses composite keys combining order IDs and SKUs to precisely match records across both systems. Processing data locally eliminates upload delays, reduces infrastructure costs, and ensures sensitive enterprise data never leaves the user's machine. A developer is building FormatForge.org around this architecture, offering browser-based tools for data reconciliation and payload validation aimed at data engineers.

0
ProgrammingDEV Community ·

DEV Community and Sanity Launch Coding Challenge With $2,500 in Prizes

DEV Community has partnered with Sanity to host a coding challenge running from September 18 to October 4. Participants can compete across two tracks: building an AI agent powered by structured content, or vibe-coding an app with Sanity as the backend. A total of $2,500 in prizes will be distributed among five winners, with three awarded in the agent-building track and two in the vibe-coding track. Submissions are judged on criteria including technical implementation, schema design, creativity, and meaningful use of Sanity's structured content features. All entries must include a Sanity project ID or public dataset link to be considered complete.

0
ProgrammingHacker News ·

Philosophy paper argues the US may be conscious if materialism holds true

A philosophical paper published on JSTOR explores the provocative idea that the United States could possess consciousness if materialism is accepted as true. The argument builds on materialist theories of mind, which hold that consciousness arises from physical processes and organization. By extension, the author suggests that large, complex systems like nation-states may meet the criteria for consciousness under such frameworks. The paper has drawn attention on Hacker News, sparking discussion about the boundaries of consciousness and collective entities. It raises broader questions about how far materialist theories of mind can be applied beyond individual biological organisms.

0
ProgrammingDEV Community ·

AI Agent Skills Explained: A Complete Overview for Developers

A guide published on DEV Community by Samuel Adekunle on September 18 covers the essential skills behind AI agents. The article is aimed at developers and tech enthusiasts looking to understand how AI agents function. It falls under topics including artificial intelligence, agent-based systems, and practical tech education. The piece is estimated to be a six-minute read and has received community engagement in the form of reactions.

0
ProgrammingDEV Community ·

Enterprise AI in 2025: What's Actually Working Beyond the Hype

Despite widespread excitement around artificial intelligence, most enterprises in 2025 are still struggling to move AI projects from pilot to production. Tools like GitHub Copilot and document-processing AI are delivering real but modest gains — typically 20–40% productivity improvements in specific workflows, not the tenfold leaps vendors promise. Retrieval-Augmented Generation (RAG), which combines company data with large language models, is emerging as one of the most practical enterprise applications, improving search and document analysis while reducing false outputs. However, experts warn that hidden costs — including data preparation, infrastructure, and change management — are routinely left out of AI return-on-investment calculations. The broader takeaway is that AI is evolving into core business infrastructure rather than a standalone strategy, and companies that treat it as such are seeing the most measurable results.

0
ProgrammingDEV Community ·

skills.sh Offers Standardised Way to Package and Share AI Agent Instructions

A new open platform called skills.sh, built by Vercel Labs, aims to standardise how AI coding agents receive specialised instructions and workflows. The platform introduces a format called Agent Skills, where each skill is a folder containing a SKILL.md file with YAML metadata and markdown instructions. Developers can install skills with a single command via a CLI tool that is compatible with agents including Claude Code, Cursor, GitHub Copilot, and Gemini CLI. The system uses progressive disclosure, loading only skill names and descriptions at startup to keep context windows efficient, then fetching full instructions when relevant. skills.sh functions as a public directory where users can browse, share, and discover community-built skills across languages and frameworks.

0
ProgrammingDEV Community ·

Conversor Brasil launches free browser-based file conversion tool with 115+ features

A Brazilian developer has launched Conversor Brasil, a free file conversion platform that processes all files entirely within the user's browser without uploading data to any server. The tool was built in response to privacy concerns around converting sensitive documents on third-party websites. At launch, the platform offers over 115 tools spanning image conversion, PDF editing, video-to-audio extraction, and data file transformation. It also includes Brazil-specific utilities such as Pix QR code decoding, boleto barcode parsing, CPF/CNPJ validation, and traditional Brazilian unit conversions. The site is built with plain HTML, CSS, and JavaScript, relying on browser APIs like Canvas, File API, Web Workers, and WebAssembly to handle all processing client-side.

0
ProgrammingDEV Community ·

A Six-Part One-Page Brief Can Keep AI Agents Focused and On Task

AI agents often produce generic or off-target results not due to capability limits, but because poorly structured instructions create a low signal-to-noise ratio. When essential facts, historical background, and vague priorities are mixed together, the agent cannot reliably distinguish what matters most. A concise one-page work brief addresses this by supplying only the highest-value context the agent needs to complete a task. The brief is structured around six components: the desired output, trusted sources, hard constraints, current situation, a definition of quality work, and clear boundaries for when human review is required. This lean format helps the agent stay focused on the actual task without being buried in unnecessary background material.

0
ProgrammingDEV Community ·

Rust eBPF Tool Detects and Kills Ransomware by Monitoring File-Open Rate

A developer has built a lightweight ransomware detection tool called talus-process-monitor, released under the MIT licence on GitHub. The program uses eBPF — a Linux kernel feature that lets small sandboxed programs attach to kernel events without loading custom modules — written in Rust using the aya library. It hooks two syscalls, execve and openat, to track how many files a single process opens per second, a key behavioural signature of ransomware. When the file-open rate crosses a configurable threshold within a one-second window, the tool automatically sends a SIGKILL signal to terminate the offending process. The approach requires no machine learning model, relying instead on a simple rate metric to catch mass file-encryption activity in real time.

0
ProgrammingDEV Community ·

How Product Leaders Can Embed Apps in AI Clients Using MCP Protocol

The Model Context Protocol (MCP), an open standard introduced by Anthropic in November 2024, allows external software to be accessed directly inside AI clients like Claude, ChatGPT, and Microsoft Copilot. Rather than users navigating to standalone apps, AI agents now invoke tools on their behalf mid-task, shifting software distribution from destination-based to agent-mediated. MCP uses JSON-RPC 2.0 and exposes three core primitives — tools, resources, and prompts — across major AI platforms that have broadly adopted the standard by mid-2026. For product teams, embedding via MCP involves choosing target clients, defining integration depth, and implementing an MCP server with OAuth 2.1 authentication, with build costs ranging from roughly $100K for read-only integrations to $700K for full action-capable deployments. The strategic implication is significant: the key competitive question is no longer whether users choose your app, but whether AI agents select it during automated workflows.

0
ProgrammingDEV Community ·

UAE Rethinks 5GW AI Data Center After Drone Strikes, Signals Infrastructure Shift

The UAE is revising plans for a massive 5-gigawatt AI data center campus in Abu Dhabi after Iranian drone and missile attacks struck AWS facilities in the UAE and Bahrain in September 2026, according to Reuters. The original single 26-square-kilometer campus concept is being replaced with a distributed network of data centers spread across the country. Officials are also weighing underground construction and air defense systems to protect the facilities. The incident highlights a broader architectural challenge: AI infrastructure has grown large enough to inherit the physical resilience requirements of critical systems like power grids and telecom networks. Traditional cloud architecture, built around software-level redundancy and regional failover, was never designed to address threats at this physical and geopolitical scale.

0
ProgrammingDEV Community ·

MCP Apps Must Nail OAuth 2.1, Scopes, and Enterprise SSO to Win Procurement

Model Context Protocol (MCP) applications rely on three dominant authentication patterns: OAuth 2.1 with PKCE, API key handoff, and enterprise SSO via identity providers such as Entra ID or Google OAuth. The MCP specification mandates OAuth 2.1 with PKCE for remote servers, along with Dynamic Client Registration (RFC 7591) and Authorization Server Metadata (RFC 8414). Enterprise-ready deployments require scopes structured per resource, verb, and sensitivity level, combined with bounded token lifetimes, immediate revocation, and customer-facing audit logs. Security teams evaluating MCP apps apply the same OAuth review standards used for third-party SaaS, with additional scrutiny on how non-human agents are constrained within granted permissions. Experts warn that a weak authentication design signals a weak product overall, making auth strategy a core business and procurement decision rather than a purely technical one.

0
ProgrammingDEV Community ·

How to Sync Shopify, Amazon, TikTok Shop and eBay with One China Warehouse

Sellers managing multi-channel e-commerce from a single China-based inventory pool face a critical challenge: reconciling different order models across platforms like Shopify, Amazon FBM, TikTok Shop, and eBay without overselling shared stock. The core solution is a single authoritative inventory ledger that processes reservations atomically, ensuring no two channels can simultaneously commit the last available unit. All incoming channel orders must be normalized into one internal format at the point of ingestion, with customs and shipping decisions made at routing time rather than at the border. Tracking write-backs to each channel must be triggered immediately on dispatch, not batched, as platforms like Amazon FBM and TikTok Shop impose penalties for late or missing shipment confirmations. Businesses evaluating a China-origin third-party logistics provider should verify that the warehouse management system supports webhook-driven intake with idempotency guarantees, a unified inventory pool, and per-order carrier selection across all channels.

0
ProgrammingDEV Community ·

All Major AI Clients Support MCP by Mid-2026, But Differ Widely in Reach

As of mid-2026, all six leading AI clients — Claude, ChatGPT, Cursor, Microsoft Copilot, Gemini, and Perplexity — support the Model Context Protocol (MCP), a standardized JSON-RPC 2.0 framework for AI tool integration. Despite sharing the same underlying protocol, the clients differ significantly in distribution models, authentication patterns, target audiences, and app discovery mechanisms. Claude is considered the strongest option for prosumer and knowledge-worker use cases, while ChatGPT offers the largest user base and a more mature app marketplace. Cursor is best suited for developer-tool companies, Microsoft Copilot leads for enterprise environments tied to Microsoft 365, and Gemini is most relevant for Google Workspace-heavy audiences. Analysts note that no client has yet established a mature paid-app pathway, and agent-led routing is currently the fastest-growing discovery channel across the ecosystem.

0
ProgrammingDEV Community ·

Building an MCP Server in 2026 Can Cost Up to $1M or More

Developing a Model Context Protocol (MCP) server in 2026 ranges from $100K–$300K for a basic read-only single-client build to over $1M for an agent-resident implementation, according to real partner engagements and in-house build data. The primary cost drivers are not the server code itself but rather authentication complexity, security auditing, tool-surface design, and distribution requirements. Adding a second AI client multiplies the total cost by 1.4–1.7 times, while security line items such as OAuth setup, audit logging, and SOC 2 certification can add $180K–$380K to a level-2 build alone. In-house builds typically run 60–80% of partner costs in direct spend, though opportunity costs are not factored in. Beyond the initial build, teams should budget an additional $5K–$25K per month for ongoing maintenance and roughly $20K annually for hosting.

← NewerPage 1149 of 3222Older →