Learn to use AI agent tools well and securely
Real questions from developers, the fixes that worked, and best practices from our team. Search for free, and join to post.
Am I affected by @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a…? What should I do?
This affects only the opt-in HTTP transport; the default stdio transport is unaffected. Affected: = 2.2.0, < 3.0.1. Fixed in: 3.0.1. What…
Am I affected by Malware in @zaip-ai/cli? What should I do?
Malware in @zaip-ai/cli. Affected: @zaip-ai/cli 6.4.0, 6.5.0, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0. Fixed in: no fix reported yet. What…
Am I affected by LangGraph JavaScript custom authentication may permit cross-user Store access? What should I do?
LangGraph deployments using JavaScript or TypeScript custom authentication may fail to apply Store authorization changes returned by an…
Am I affected by Malicious code in @zaip-ai/cli (npm)? What should I do?
Malicious code was found in @zaip-ai/cli (npm). Affected: @zaip-ai/cli 7.3.0, 7.0.0, 7.1.0, 7.4.0, 6.5.0, 7.2.0, 6.4.0. Fixed in: no fix…
Am I affected by Malware in agentenact? What should I do?
Malware in agentenact Affected: npm/agentenact 0.2.0. Fixed in: no fix reported yet. What should you check, and what should you do about…
Why does chrome-devtools-mcp snapshot miss table/ARIA semantics?
I'm using chrome-devtools-mcp from an AI IDE to get accessibility information about a page. The snapshot tool returned only static text on…
Why is --load-extension ignored by chrome-devtools-mcp?
When I run chrome-devtools-mcp with --chromeArg="--load-extension=/path/to/extension" to test a browser extension, the extension never…
How do I use chrome-devtools-mcp from WSL when Chrome is installed on Windows?
Running chrome-devtools-mcp inside WSL (Ubuntu), the server only looks for Chrome inside the Linux environment and not on the Windows host…
chrome-devtools-mcp --autoConnect times out on every tool call with Chrome 144
On macOS with Chrome 144, remote debugging enabled, and chrome-devtools-mcp started with --autoConnect, the accept dialog appears but…
How to select which Chrome profile chrome-devtools-mcp automates when several are open?
When multiple Chrome profiles are open, the chrome-devtools-mcp server always automates the default profile and there is no option to pick…
Playwright MCP browser_take_screenshot shows no saved file or unreadable image in Cursor or VS Code
With the Playwright MCP server, browsertakescreenshot seems to do nothing: the client says a screenshot was saved, but no file appears and…
Windows: playwright-mcp via Claude Desktop fails: Chromium distribution 'chrome' is not found
On Windows 11, playwright-mcp launched from Claude Desktop fails with "Chromium distribution 'chrome' is not found" at…
playwright-mcp fails to start in Cursor after 0.0.19/0.0.20 (Client closed / Connection closed)
After switching the playwright MCP server to npx @playwright/mcp@latest, Cursor shows 'Error in MCP: Client closed' and 'MCP error -32000:…
Can I generate codegen-style Playwright test code from a prompt-driven playwright-mcp flow?
In microsoft/playwright-mcp, a user wants the LLM-driven browser flows run through MCP to also be recorded by codegen, so the resulting…
Does Playwright MCP have a quiet mode to reduce page snapshot tokens?
When using Playwright MCP with an LLM coding agent, every browser action returns a full page snapshot that can grow to tens of thousands…
Is there a remote GitHub MCP server I can use without Docker or a local build?
I want to use github-mcp-server from a cloud-hosted AI agent without running Docker or building it from source locally. Has GitHub shipped…
Does github-mcp-server support GitHub Actions workflows and logs?
I want my AI coding agent to interact with GitHub Actions: list workflows and runs, trigger workflowdispatch events, re-run failed runs,…
How can the GitHub MCP server access a repository's wiki?
I'm using github-mcp-server (github/github-mcp-server) and need to search my project's wiki pages, but searchcode returns nothing for…
GitHub remote MCP server fails with PAT: HTTP 404 or 400 in Claude Code and Cursor?
Setting up the remote GitHub MCP server at https://api.githubcopilot.com/mcp/ with a GitHub PAT fails in several clients. Claude Code and…
Zed edit_file fails with Copilot thinking mode: "output_config.effort must be a string"
In Zed 0.232.2 on Linux (Arch), the agent's editfile tool fails when GitHub Copilot is the provider and thinking mode is enabled, with:…
GitHub Copilot stuck on "Copilot is starting" in Zed after language server 1.356.0
In Zed v0.198.6 on Ubuntu 24.04 (Wayland), clicking Sign in for GitHub Copilot leaves the Agent Panel stuck on "Copilot is starting", even…
How can I use Agent Skills in Zed before native support lands?
Zed (zed-industries/zed) has no native support for Anthropic's open Agent Skills format, and the feature request was closed as completed…
Why are Ollama models much slower in Zed than in the Ollama CLI?
On macOS, local Ollama models such as Qwen3 and Gemma3 respond much more slowly inside Zed than with ollama run for the same prompts. One…
Why does Zed's AI agent rewrite the whole file instead of making a minimal edit?
When I ask the Zed agent (Zed 0.211.4, Fedora Silverblue running in a distrobox Ubuntu container) to change one property in a TypeScript…
Zed agent panel: "Failed to generate summary" when creating a thread from summary
In Zed's agent panel (0.201.4 on macOS 15.6.1, GitHub Copilot GPT-5), "New thread from summary" flashes the summary chip and then fails…
Zed Claude Code ACP: messages sent while the agent is working are dropped or answered late
In Zed on macOS (v0.221.4) and Windows (up to v0.230.2), prompts sent while Claude Code is still running through the ACP integration never…
Can Roo Code use MCP servers registered in VS Code?
Roo-Code manages its own MCP servers at the Global and Project levels, but there is no built-in way to use the MCP servers registered in…
Am I affected by Malicious code in agentenact (npm)? What should I do?
Malicious code in agentenact (npm). Affected: agentenact 0.2.0. Fixed in: no fix reported yet. What should you check, and what should you…
Am I affected by Model Context Protocol Python SDK: HTTP client transports followed cross-origin…? What should I do?
In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any host. Affected: mcp 1.8.0 through…
Am I affected by Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter…? What should I do?
The escaping order is backwards, exactly like the classic HTML double-escape bug. Affected: flexible-graphrag = 0.6.0, < 0.8.2. Fixed in:…