This week pushed three concrete lines forward at once. Vercel open-sourced an AI security harness, TinyFish made paid web search and fetch APIs free for AI agents, and Jama Software shipped the first Model Context Protocol server for engineering management. Underneath that, Z.ai's GLM-5.1 went live inside a trusted execution environment, and Anthropic previewed a proactive assistant for its work product. Here is what shipped and why each piece matters.
AI Coding Tools: Vercel Ships deepsec, TinyFish Drops Search Behind a Paywall
Vercel open-sourced deepsec, an AI-powered security harness that uses Claude and Codex to scan large codebases for vulnerabilities. The tool runs CLI-first, scales to over 1,000 concurrent sandboxes, and works with any pluggable coding agent through Vercel's AI Gateway or your own subscription. The pitch is straight: most coding agents handle one repo at a time, but security audits need to fan out across dozens of services in parallel. deepsec treats the agent as a worker pool and scales horizontally.
TinyFish made its Web Search and Fetch APIs free for all developers and AI agents on May 5. The free tier supports Claude Code, Cursor, Codex, and other major agent frameworks, with no credit card required and what TinyFish calls generous rate limits. Web access has been a paid bottleneck for agent workflows since 2024, and a free tier from a vendor that already serves the agent ecosystem will pull pricing pressure across the rest of the search-API market.
Anthropic also previewed a proactive assistant called Orbit for Claude Cowork. Orbit will pull insights from Gmail, Slack, GitHub, Calendar, Drive, and Figma, then surface them on its own without the user asking. The product is reportedly a Max-tier feature, and Orbit Apps were also referenced in the leaks. The combination of always-on context and proactive surface area is the next step beyond chat-only agent products.
AI Processing: GLM-5.1 Runs FP8 Inside a Trusted Execution Environment
Z.ai's GLM-5.1 went live on the 0G Private Computer running FP8 inside a Trusted Execution Environment on May 5. The model is a 754-billion-parameter Mixture-of-Experts release with 40 billion active parameters per token, shipped under the MIT license on April 7. Running it inside a TEE means the weights and prompts stay encrypted from the host operating system and cloud provider, which closes the residual trust gap that has slowed enterprise self-hosting of large open-weight models.
The 0G deployment matters for a specific reason. GLM-5.1 was trained entirely on Huawei Ascend 910B chips with no Nvidia or AMD GPUs, scores 58.4 percent on SWE-Bench Pro, and sustains autonomous task execution for over 8 hours. Putting that capability behind a TEE on a third-party serving platform is the first time a frontier-tier open-weight model has been delivered with hardware-backed confidentiality outside a hyperscaler.
Air Street's State of AI report for May noted that the UK AI Security Institute now estimates frontier cyber-offence capability is doubling every four months, with both Anthropic's Claude Mythos Preview and OpenAI's GPT-5.5 clearing a 32-step end-to-end cyber-attack range in a single month. The compute side of the picture stayed dense as well. Anthropic raised an additional $40 billion from Google plus $5 billion from Amazon, packaged with $100 billion of AWS spend and chip deals with Google and Broadcom reportedly worth hundreds of billions.
Standards & Protocols: First MCP Server for Engineering Management
Jama Software launched the first MCP Server for engineering management software on May 4. Jama Connect 9.35 lets engineers work in Claude, Codex, Cursor, GitHub Copilot, Visual Studio, or any MCP-compatible tool while keeping the existing Traceability Information Model, permissions, lifecycle workflows, and audit trails intact. The pitch from CTO Jim Davidson is that AI engineering agents need Spec Driven Development to deliver compliant velocity gains, and MCP is now the standard pipe for that integration.
Unity AI also entered open beta this week with built-in MCP Server support, alongside the AI Gateway for third-party AI integrations. Game studios get a built-in agent tuned for Unity workflows plus the option to plug in any MCP-compatible client. The pattern across both releases is clear: vertical product vendors are no longer asking whether to support MCP. They are shipping it as a default integration surface alongside their native UIs.
The Model Context Protocol's 2026 roadmap sets the priorities behind these adoptions. Lead Maintainer David Soria Parra named four focus areas: stateless transport for horizontal scaling, server discovery through .well-known URLs, task lifecycle for retry semantics and result expiry, and enterprise-readiness work covering audit trails, SSO, and gateway behavior. The June 2026 specification cycle is targeted for the stateless transport changes. Agentic AI Foundation governance, two specification releases through 2025, and a 500-plus public server count have moved MCP from an experiment into the production layer it was designed to be.
Resources to Go Further
The AI landscape changes fast. Here are tools and resources to help you keep pace.
Try Dremio Free: Experience agentic analytics and an Apache Iceberg-powered lakehouse. Start your free trial
Learn Agentic AI with Data: Dremio's agentic analytics features let your AI agents query and act on live data. Explore Dremio Agentic AI
Join the Community: Connect with data engineers and AI practitioners building on open standards. Join the Dremio Developer Community
Book: The 2026 Guide to AI-Assisted Development: Covers prompt engineering, agent workflows, MCP, evaluation, security, and career paths. Get it on Amazon
Book: Using AI Agents for Data Engineering and Data Analysis: A practical guide to Claude Code, Google Antigravity, OpenAI Codex, and more. Get it on Amazon
Top comments (0)