mcp

According to VentureBeat, the Model Context Protocol (MCP) has received its largest update since its launch in November 2024, managed by the Agentic AI Foundation (AAIF) under the Linux Foundation. This update completes the transition to a fully stateless architecture, allowing MCP servers to be deployed behind standard load balancers without relying on "sticky routing" or shared session state, thereby simplifying large-scale cloud-native and Kubernetes deployments.In terms of security, the new version of MCP enforces validation of the issuer (iss) parameter for OAuth and OpenID Connect to prevent mix-up attacks and introduces enterprise-hosted authorization extensions to support unified identity governance for enterprises. The protocol also establishes a formal deprecation policy, ensuring that features are announced for deprecation at least 12 months before their earliest removal. MCP Apps and MCP Tasks have also been upgraded to official extensions, supporting servers in providing interactive interfaces to AI clients and executing interruptible, resumable long-running asynchronous tasks through persistent task handles. According to MCP co-creator David Soria Parra, the related SDK's weekly download volume has reached approximately 250 million, doubling in the past six months.

The AI Agent no-code operating platform X-Agent based on Web3 social networks has officially become a merchant in the OKX Agent Marketplace, launching three production-level risk analysis MCP (Model Context Protocol) tools, and deeply integrating with OKX Onchain OS and OKX Agentic Wallet, promoting the evolution of AI Agents from mere software logic to entities with autonomous economic behavior capabilities.The first batch of three pay-per-use MCP tools:X-Agent encapsulates the underlying risk assessment capabilities verified by the platform into standard MCP services for other Agents within the ecosystem to automatically discover and call:Token Security Scan: Identifies Rug Pull, Pi Xiu schemes, and contract restriction risks (0.03 USDT / use).Wallet Reputation: Evaluates the historical behavior of counterparties and "smart money" (0.01 USDT / use).Portfolio Health: Analyzes position concentration and volatility risks (0.01 USDT / use).Deep integration with the OKX ecosystem architecture, enabling machine micropayments:x402 machine-native settlement: Combines gas-free USDC settlement based on EIP-3009 with the Coinbase x402 protocol, achieving minimal per-use payments as low as 0.01 USDT on OKX X Layer, without the need for pre-deposit or manual approval.OKX TEE hardware-level custody: Integrates with OKX Agentic Wallet, storing private keys within OKX TEE (Trusted Execution Environment), with X-Agent authorized only through short-term session signatures, ensuring asset security from the source.Idempotent automated execution: Introduces Pre-Broadcast protection and idempotent state machines to prevent duplicate charges or state conflicts in on-chain autonomous tasks.Building a "two-way cycle" Agent economy:This collaboration marks the realization of a full-path connection in the X-Agent architecture from "identity - payment - execution - monetization - distribution." Agents can autonomously procure external services through OKX Agentic Wallet and package their capabilities into paid MCP tools to earn revenue, truly achieving a value closed loop for a decentralized Agent economy.

According to CoinDesk, Coinbase's Ethereum Layer 2 network Base has launched an AI integration tool called Base MCP, which allows users' Base accounts to connect to AI clients such as ChatGPT, Claude, and Cursor. Users can complete transfers, token exchanges, check balances, view transaction records, and interact with DeFi applications through natural language.

According to official news, Base MCP has officially launched. Users can connect their Base accounts to the AI interface to execute exchanges, transfers, track portfolios, and participate in the Base ecosystem through chat. The service supports Morpho, Moonwell, Aerodrome, Bankr, Avantis, Virtuals, and Uniswap from the start, covering areas such as lending, exchanges, and perpetual contracts.Users can install and use the Base account for authentication through AI clients that support MCP. All transactions initiated by the AI agent require user manual confirmation or cancellation. Base MCP is built on the OAuth 2.1 standard for authentication, generating wallet request links through the storage request feature, and the MCP server does not hold or access user private keys.

OpenClaw founder Peter Steinberger posted on the X platform that the next version of OpenClaw will also adopt MCP (Model Context Protocol), allowing users to replace Anthropic's message channel model context protocol, thereby connecting to a wider range of message providers. Peter Steinberger also admitted that this adjustment is "a bit awkward," but it will significantly expand OpenClaw's message access capabilities and ecological compatibility.In response to community concerns that OpenClaw is "biased" towards OpenAI, Peter Steinberger also stated that OpenClaw supports various software from Microsoft's Teams, Matrix to WhatsApp.

Gate Pay announced the launch of the Merchant MCP (Merchant MCP) service, promoting the application of AI Agent in payment operation scenarios. This service encapsulates high-frequency operations such as balance inquiries, order inquiries, and refunds into Tools that comply with the MCP protocol, allowing merchants to complete inquiries and operations through natural language commands in customer service, finance, and operations scenarios, improving efficiency and optimizing process collaboration.Gate Pay introduces Restricted Access Keys (RAK), supporting on-demand configuration of calling permissions, and combines idempotency checks, frequency limits, and risk control mechanisms to ensure operations are controllable and traceable. The current MVP version supports three core capabilities: balance inquiries, order inquiries, and refunds, and will continue to expand to more scenarios in the future.Gate has built a unified interface architecture covering six major capabilities: CEX, DEX, wallets, payments, data, and information, supporting AI Agent to complete the entire process from information acquisition to execution on the same platform. The launch of the Merchant MCP further strengthens the capability boundaries of AI Agent at the execution level, providing more direct infrastructure support for the implementation of AI in real business scenarios.

The globally leading cryptocurrency trading platform Gate has announced that the CEX MCP within the Gate for AI system has completed an important upgrade.This upgrade focuses on optimizing the AI Agent access and authorization process. After the upgrade, users can complete authorization directly within the conversation when using Gate MCP in AI tools, without the need to manually open a browser or switch pages; the authentication process can be completed in the same chat window. Whether using tools like Cursor, Claude Code, or OpenClaw, the overall experience is much smoother. Additionally, the platform provides a one-click installation tool and supports both API Key and OAuth authorization methods, making it simpler and more flexible for AI models to access trading capabilities.In terms of capabilities, the tool system of Gate MCP has further expanded, with the total number of tools now increased to 161. The callable capabilities of the AI Agent now cover market data, spot trading, contracts, and have expanded to include options, delivery contracts, wealth management, and more product scenarios, enabling AI not only to execute trades but also to participate in a more complete asset management and strategy execution process.

The digital asset trading platform Gate announced that its Gate for AI system has upgraded the Wallet MCP module, providing on-chain asset management and wallet interaction capabilities for AI Agents. Through the MCP interface, AI can create non-custodial wallets, query account assets, send tokens, and obtain real-time Gas information, achieving an integrated capability for on-chain asset operations and information retrieval.The Wallet MCP also supports asset management and token security detection for over 100 mainstream networks, and can facilitate interaction between web and plugin through plugin wallets, offering a more flexible human-machine collaboration mechanism between automated execution and manual confirmation.Currently, Gate for AI has established a standardized data and transaction access system through MCP and Skills modules, covering five major capabilities: CEX, DEX, wallet signing, real-time information, and on-chain data, providing a complete capability entry for AI Agents to enter the digital asset market. This capability system will further promote the deep integration of AI and digital asset trading scenarios.

The global cryptocurrency trading platform Gate has announced the upgrade of its AI Agent infrastructure, Gate for AI. Today, the DEX MCP has been fully upgraded to provide native full-scenario market insights and cross-chain trading capabilities for AI Agents.Gate for AI has now connected CEX and DEX, building five major capability systems. First, centralized trading capabilities (CEX), supporting the invocation of products such as spot, contracts, wealth management, and IPOs; second, on-chain trading capabilities (DEX), supporting Swap, on-chain perpetual contracts, and Meme coin trading, deeply aggregating liquidity from 20+ mainstream public chains, and achieving optimal price execution through smart routing; third, wallet and signature systems, supporting wallet creation and on-chain signing; fourth, real-time information and sentiment data systems, providing structured market news and event data; fifth, on-chain data and industry information query capabilities, supporting queries on currencies, projects, addresses, and risk information.Gate for AI connects centralized and on-chain markets through a unified interface, allowing AI to conduct research, strategy generation, and trade execution within the same framework. After developers integrate mainstream AI systems, AI can directly invoke trading and data capabilities.This system adopts a dual-layer architecture of MCP + Skills, aiming to extend the exchange capabilities from traditional user interfaces to infrastructure that can be invoked by AI. This upgrade marks a gradual shift of trading platform capabilities towards AI-native infrastructure, and Gate will continue to promote the application of AI Agents in the digital asset market.

The digital asset trading platform Gate officially launched Gate for AI, introducing the industry's first unified AI entry point that integrates five major capabilities—CEX, DEX, wallets, real-time information, and on-chain data—under the same interface system.Gate for AI adopts a dual-layer capability structure. In this architecture, MCP provides standardized basic interfaces, covering functions such as market data, account information, trade execution, and on-chain data queries, enabling AI to quickly access and utilize platform capabilities; Skills encapsulates higher-level strategy modules based on this, such as market scanning, position range assessment, and risk analysis, helping AI make more complex trading decisions.In addition, Gate for AI supports multi-platform calls, lowering the usage threshold and catering to users with different needs. This release marks the upgrade of the exchange's capabilities from interface products to directly callable AI infrastructure, pushing digital asset trading into the era of Agent-native.

The crypto wallet Phantom announced the launch of the MCP server on platform X, supporting AI Agent exchange, signing, and management of all on-chain addresses supported by Phantom, and can also be used with Claude, OpenClaw, or any MCP-compatible client.

The cross-chain protocol deBridge has announced the launch of the Model Context Protocol (MCP), allowing AI agents and developer tools to execute swaps, bridges, and multi-step transactions between EVM chains and Solana.This release follows the launch of deBridge Bundles, which are an intent-based execution model designed to eliminate chain-level complexity.

According to The Hacker News, Cyata researchers have disclosed three critical security vulnerabilities (CVE-2025-68143/44/45) in the mcp-server-git maintained by Anthropic, which can be exploited for path traversal and parameter injection, potentially leading to remote code execution.These vulnerabilities can be weaponized through prompt injection, allowing attackers to trigger the attack simply by controlling the AI assistant to read malicious content. The vulnerabilities have been patched in the versions released in September and December 2025, and the official has removed the git_init tool and enhanced path validation, recommending users to update to the latest version as soon as possible.

Three security vulnerabilities have been discovered in the official mcp-server-git maintained by Anthropic. These vulnerabilities can be exploited through prompt injection attacks, allowing attackers to trigger the vulnerabilities via malicious README files or compromised web pages without direct access to the victim's system. The vulnerabilities include: CVE-2025-68143 (unrestricted git_init), CVE-2025-68145 (path validation bypass), and CVE-2025-68144 (parameter injection in git_diff).When these vulnerabilities are combined with the file system MCP server, attackers can execute arbitrary code, delete system files, or read arbitrary file contents into the large language model context. Cyata points out that since mcp-server-git does not perform path validation on the repo_path parameter, attackers can create Git repositories in any directory on the system. Additionally, by configuring a cleanup filter in .git/config, attackers can run shell commands without execution permissions. Anthropic assigned CVE identifiers and submitted a patch on December 17, 2025. Users are advised to update mcp-server-git to version 2025.12.18 or higher.

ChainCatcher news, according to The Block, Coinbase has released "Payments MCP," allowing large language models (such as Claude, Gemini) to interact with wallets, fiat deposits, and stablecoin payments through natural language, and supports local operation and customization.This tool was developed by the Coinbase Developer Platform and aligns with the previous efforts of the x402 Foundation, supported by Coinbase and Cloudflare, aimed at standardizing AI payments. The official statement describes stablecoins as the ideal payment infrastructure for "agentic commerce," and Payments MCP will enable mainstream LLMs to natively connect the crypto economy with payment protocols like x402.