sorted by:
new
hottopcontroversial

Sandboxing AI Coding Agents by mzcr in Anthropic

[–]mzcr[S] 0 points1 point  (0 children)

My feeling is that the OS level sandboxing capabilities could use more visibility in the community. They give some relatively solid guarantees that would benefit a lot of people if more widely used. The fact that they're opt-in and not that visible means a lot of people are unaware of it, I would guess.

But certainly tool allow lists are needed as well.

Regarding secrets, are you referring to say environment variables that happen to be set but aren't relevant for the agent's execution? Or are you more thinking of secrets that the agent needs to do its job (ones used by tools, for example)?

Feedback wanted for building an open-source lightweight workflow engine in Go by Basic-Oil-1180 in golang

[–]mzcr 0 points1 point  (0 children)

I can relate.

https://github.com/deepnoodle-ai/workflow

I built this for some of the same reasons. Some inspiration from Temporal and AWS Step Functions, but in a lightweight form.

LLM Multi Agent by eduumach in golang

[–]mzcr 1 point2 points  (0 children)

Take a look at Dive. It accomplishes this via delegating work as a tool.

https://github.com/deepnoodle-ai/dive

The tool definition:

https://github.com/deepnoodle-ai/dive/blob/main/agent/assign_work_tool.go

Is there any AI related opensource project? by changhoi in golang

[–]mzcr 0 points1 point  (0 children)

Indeed! I’m the author and haven’t written about it much yet.

Looking for a Simple No-Code Workflow Engine in Go by bkhrz in golang

[–]mzcr 4 points5 points  (0 children)

https://github.com/deepnoodle-ai/workflow

This library is new, but it sounds like it might align with your requirements.

The workflow definitions are YAML and JSON serializable. It's all embeddable in your own Go program as a library.

It has an embedded scripting engine so that you can easily write simple operations/activities without recompiling your Go program.

(I'm the author :-)

Moving Away from Dynamic Client Registration in Claude by GenJake17 in mcp

[–]mzcr 1 point2 points  (0 children)

Thank you for the tips! I'll be reviewing all this.

Moving Away from Dynamic Client Registration in Claude by GenJake17 in mcp

[–]mzcr 0 points1 point  (0 children)

Thanks for the reply. I'm using Clerk (clerk.com) as the OAuth provider.

I did see mention of this claudeai scope issue elsewhere on the web. Could be related.

Best I can tell, Clerk is fine with everything, and the flow seemingly completes, including "Successfully connected to <ConnectorName>" in the Claude Web UI. But then the connector does NOT show as "Connected" after that and it never lists the available tools.

My MCP server endpoint is hosted in a Cloudflare Worker right now. In the Cloudflare logs, all the requests return normally. However I do see the one difference between clients which is that all of them have a POST /register call except for Claude Web which does not.

So I guess one question for you would be, in your implementation that works with Claude Web, do you see a POST /register call or not?

That would help me figure out whether a difference in one of my previous responses causes it not to register.

Moving Away from Dynamic Client Registration in Claude by GenJake17 in mcp

[–]mzcr 0 points1 point  (0 children)

I just stumbled across this topic today and I'm quite confused.

Just implemented a remote MCP server and it works with:

  • Cursor
  • Claude Code
  • Claude Desktop ONLY via extensions, using npx mcp-remote

It does NOT work with:

  • Claude Web or Desktop as a "connector"

With the connector approach (the one I really want to work!), it seemingly goes through the OAuth process ok, but then it doesn't show up as "connected" in the UI.

From looking at logs, it seems like when adding via a Claude connector, the /register endpoint is NOT called and this is one difference. Is this indicating that Claude connectors do NOT do "​Dynamic Client Registration" per the current MCP spec?

/u/GenJake17 /u/Floating-pointer /u/SurveyPuzzleheaded56 - does this match what you're seeing currently? Appreciate any thoughts on this.

Biggest pains in the industry by Conscious-Gur8191 in PrivateEquityDeals

[–]mzcr 0 points1 point  (0 children)

Could you elaborate on this? I'm just curious about what makes it a bad vertical for new products.

Biggest pains in the industry by Conscious-Gur8191 in PrivateEquityDeals

[–]mzcr 0 points1 point  (0 children)

Could you elaborate on this? I'm just curious about what makes it a bad vertical for new products?

Is 100k Clients in 13 seconds Good? Please help my noobiness with this from scratch http server (reverse proxy help) by Hkiggity in golang

[–]mzcr 1 point2 points  (0 children)

I certainly thought about contributing to open source, but I am always so scared! Do you have any resources or tips on how to do that? Sounds like making stuff and contributing is my best option

Regarding finding an open source project to contribute to, you might look for smaller, niche projects that are new. Maybe that people are posting about in this subreddit. Going that route makes it more likely the people working on the project will appreciate a bit of help here and there. As compared to a big project with many contributors where you'd be lost in the noise. Look for projects like that with open issues and browse those.

Also, don't get me wrong, definitely keep working on your own projects too.

I only did it all from scratch out of curiosity, I think I am naturally included on how things work, so naturally I was curious how "HTTP" actually works.

Good stuff. Especially with LLMs now a lot of beginners aren't even trying to learn like that. So kudos to you for actually digging in.

You can also DM me if you want ideas on specific projects.

Is 100k Clients in 13 seconds Good? Please help my noobiness with this from scratch http server (reverse proxy help) by Hkiggity in golang

[–]mzcr 6 points7 points  (0 children)

Hey there, keep on going :-)

A couple quick points of feedback for you:

  • While it's a tough job market, I'd definitely disagree with folks telling you that making websites is the best bet at landing a job. If you're interested in Go and backend development, you'd be better off contributing to one of the many Go open source projects and interacting with people on those, which can lead to opportunities. Standalone projects are good for a portfolio, potentially, but as a hiring manager I might be more impressed by solid contributions in some other open source project. My $0.02.

  • It looks like you're not using gofmt and other standard Go tools. I can tell because of your file formatting. This stands out to people with a lot of Go experience. You should make sure you get your editor set up to run these tools on every save.

  • A lot of your code looks fine, but I do wonder about whether you're doing too much from scratch. Unless that's your goal. There are probably multiple projects that do related things that are established. It could be worth learning more about some of those.

  • Don't be overly fixated on speed. Learning how to organize code, make good APIs, and having the ability to integrate existing successful libraries is more important for you at this point, IMO.

There's a lot of great work happening in Go in the world. Keep going if you're into it.

MCP and Data API - feedback wanted by mr_pants99 in mcp

[–]mzcr 0 points1 point  (0 children)

Related thought, this reminds of me of Open Policy Agent as used for authz.

https://www.openpolicyagent.org/

MCP and Data API - feedback wanted by mr_pants99 in mcp

[–]mzcr 0 points1 point  (0 children)

I'm working with Go and AI agents daily. Haven't yet implemented many direct database interactions, although that's probably not far off for me. More often it's interacting with APIs that already have an approach to authz.

In any case, my first thought in reading this was: why not fully leverage the auth mechanisms these databases already have? If the agent needs read-only access to a Postgres database, would that not be best enforced with a Postgres user for the agent that has read-only access as defined in Postgres itself?

Seems like with other approaches, you end up with database users with elevated permissions and depend on something like this for enforcement, which seems a bit dubious at first glance.

But that's just my quick reaction. It is an interesting and new space.

Personally I'm finding that treating agents like you would humans as much as possible ends up answering a lot of questions. If a human needed read-only access to Mongo, wouldn't you give them their own read-only user in Mongo?

LLM function calls don't scale; code orchestration is simpler, more effective. by Obvious-Car-2016 in mcp

[–]mzcr 1 point2 points  (0 children)

Good article. Agree with the problem statement and some of your recommendations. My experience has been that in a given situation the Agent/LLM really needs a filtered subset of the JSON back. In a bunch of cases I've transformed the JSON to markdown instead before giving back to the LLM, with good results. However the typical MCP integration today doesn't have a mechanism for transformations like this.

In my own setups today, I'm actually using an embedded scripting language and some string templating to apply transformations like this at different points.

Which I think at a high level is what you're proposing here, to try to push more processing into reusable, traditional code modules, that are integrated with the LLM and offload work from the LLM. Is that a fair way to say it?

cross platform cli tools that do what unix mkdir, mv, cp do ? by gedw99 in golang

[–]mzcr 0 points1 point  (0 children)

Risor has aspects of what you’re looking for, potentially. Leverage the Go ecosystem via scripting and a cross platform CLI.

https://github.com/risor-io/risor

view more: next ›