Agents and MCP stop being a devtools-only story — they're the spine of today's releases across every category.
The lead
The single signal that runs through today's 152 product updates is that agents and MCP are no longer a devtools-only conversation. Cursor shipped Cursor 3 and reframed itself from coding assistant into an agentic engineering platform; GitHub moved enterprise security and governance off CI and into the Copilot agent itself; Notion turned a viral 1M-agent surge into platform infrastructure with Plan Mode, a public agent directory, and admin guardrails. The notable part is that the same shape — make the agent the primary surface, then wrap it in guardrails — showed up just as cleanly in Forethought (Browser Agents and Orchestrator), Instantly (an AI agent replacing the outbound SDR role), and Front (AI as the primary inbox surface, not a side panel).
The second pattern is MCP graduating from a coding-tool curiosity into a default integration protocol. Workato, Descript, Arcade, PostHog, Tigris, and Vercel all shipped MCP-related surfaces today. When a video editor, a product-analytics platform, an object store, and an enterprise iPaaS converge on the same protocol within 24 hours, the question is no longer whether MCP catches on but which category is last to ship it.
What moved
- Platform-expansion sparks: Brevo had its biggest week of the year — a new social-CRM product, an AI analytics studio, and warehouse-grade connectors — moving well past email. Pinecone widened from vector database into a retrieval app platform with Marketplace and BM25. Frame.io positioned itself as the review surface for everything Adobe, including 3D, Premiere, and Firefly Boards. Jira extended into a workforce graph via a new HRIS connector.
- Agent-as-product sparks: Cursor 3, Forethought's Browser Agents and Orchestrator, Notion's Plan Mode and agent directory, and Instantly's AI SDR all reframed the product around an agent rather than a feature list.
- MCP-as-protocol shipping: Workato (MCP servers, RBAC, edge gateway, and a China DC), Descript (MCP-friendly API for Underlord), Arcade (MCP server alongside text-to-video), PostHog (MCP for alerts, SDK diagnostics, and protocol selection), Tigris (object storage positioned for AI agent infrastructure).
- Security and defaults: Supabase reversed its biggest default — public-schema tables no longer auto-exposed through PostgREST. Vercel shipped a 13-advisory Next.js batch alongside Sandbox networking and Marketplace credential lockdown. Ant Media Server crossed 3.0 with AV1, eight CVE patches, and a breaking API cleanup.
- Infra and platform plumbing: HashiCorp's first IBM-era moves landed — HCP Terraform on Infragraph in preview and Vault rebranded as IBM Vault Enterprise 2.0. Kubernetes v1.36 shipped with sharded watches and declarative validation GA. BigQuery doubled down on Iceberg, graph, and global data sharing.
- Adjacent finance and ops: Intuit Intelligence answered accountant pushback while QuickBooks shipped overdue chart-of-accounts and reconciliation primitives. Hostaway pushed AI into the host inbox and started pulling Booking.com management onto its own platform.
Sectors today
- devtools (24): Cursor 3 and BigQuery's Iceberg/graph/sharing push set the tone — devtools is consolidating into agent-runnable platforms.
- development (22): GitHub Copilot-agent governance, HashiCorp under IBM, Kubernetes v1.36, and Supabase's default-flip dominate the day.
- collaboration (17): Notion's Plan Mode and Asana's information-architecture rework anchor the day.
- marketing (16): Instantly's AI-SDR pivot, SE Ranking's repositioning for AI search, and Arcade's generative video play.
- analytics (13): Pinecone's platform widening, PostHog's MCP surface, NocoDB expanding past no-code DB.
- communication-messaging (12): Notion again, Calendly turning scheduling into a commerce surface inside Claude, Trengo going deeper on WhatsApp.
- project-management (11): Asana, Hostaway's Booking.com push, Jira's HRIS-based workforce graph.
- design (11): Frame.io as Adobe-wide review surface and Descript's Underlord/MCP play.
- customer-support (6): Forethought breaks out of CS-AI; Front doubles down on AI-first.
- finance (6): Intuit Intelligence plus QuickBooks reconciliation primitives.
- crm (7): Attio's Ask Attio now executes multi-record actions, not just answers.
- marketing-automation (4): Brevo's biggest week; Pardot's Summer '26 bridge to Marketing Cloud Next.
- video-conferencing (5): Ant Media 3.0 with AV1 and eight CVE fixes; Tella adds a Free plan and redesigned editor.
- hr-recruiting (8): Teamtailor builds out references and pushes Co-pilot from drafts into custom-prompt editing.
- ecommerce (5): Polar fills out merchant-of-record gaps — meters, multi-currency, team accounts.
- lms-edtech (3): TeamSnap ONE turns the org website into commerce and operations.
Watch tomorrow
Two threads to watch. First, whether the agent surfaces shipped today move from "new mode" into default navigation — Notion's Plan Mode, Cursor 3, and Front are the closest tests. Second, whether the MCP wave triggers a second-order response in pricing, identity, and audit. Workato's RBAC + edge gateway + MCP combo is the early shape of what enterprise-ready MCP looks like, and Supabase's default reversal is the first clear example of an MCP-era security posture correction. If even one more incumbent ships an MCP + governance bundle in the next 24h, the category-wide pattern is set.