AI Agent Frameworks Converge on MCP as 2026 SDK Releases Pile Up
OpenAI, Google, Microsoft and Anthropic all shipped or matured agent SDKs in 2026, and every framework now supports MCP, whose July spec made it stateless.
AI agent marketplaces are becoming the storefronts and distribution layer for autonomous software. Instead of building every capability from scratch, organizations can browse catalogs of prebuilt agents, tools, and connectors, then plug them into their own workflows. Many of these listings rely on the Model Context Protocol (MCP), an open standard that lets AI models call external tools and data sources in a consistent way.
The category is moving quickly from experiment to enterprise purchase. Security vendors, AI labs, and open-source projects are launching or expanding marketplaces, and pricing is evolving as shared credit pools and consumption-based billing appear alongside traditional licenses. At the same time, the connective tissue underneath is under heavy scrutiny. Researchers keep surfacing weaknesses in how MCP servers handle local execution, authentication, and authorization, and debate continues over whether some risks are deliberate design choices or genuine flaws. As agents gain the ability to act on real systems, a single vulnerable connector listed in a popular marketplace can expose many customers at once.
This hub tracks:
Whether you evaluate agents for your organization or build them, check back for coverage of how this ecosystem is taking shape and where it still breaks.
OpenAI, Google, Microsoft and Anthropic all shipped or matured agent SDKs in 2026, and every framework now supports MCP, whose July spec made it stateless.
Netskope launched AgentSkope Marketplace, a console where security teams deploy its AI agents and fund them from a single shared pool of capacity credits.
OX Security found MCP's default STDIO transport runs arbitrary OS commands, exposing an estimated 200,000 servers; Anthropic calls it expected behavior.
The official MCP Python SDK let malicious servers steal OAuth secrets; fixed in 1.30.0 and 2.2.0, alongside related Rust SDK and LiteLLM auth bugs.
Nous Research raised a $90M Series B at a reported $1.5B valuation. It is launching Hermes for Businesses to sell its open-source Hermes Agent to companies.
OpenAI's ChatGPT developer mode lets users connect any MCP server, and its own docs warn of prompt injection, risky write actions, and malicious servers.
Zenity, Noma and Obot say OpenAI's AgentKit guardrails and ChatGPT's MCP developer mode leave data and write-access risks that enterprises must govern.
At DevDay 2026, OpenAI added ChatGPT support for the draft MCP Events spec (webhooks only), plus Agents API computer use and cloud-based Codex.
MCP's stateless 2026-07-28 spec is now the baseline as TikTok, Google and Microsoft expand MCP access, while audits find thousands of unchecked public servers.
Netskope launched AgentSkope Marketplace on Oct 6, 2026: one catalog and a shared pool of capacity credits for buying, deploying and tracking its AI agents.
Agent frameworks from Microsoft, Google and OpenAI shipped rapid fall 2026 updates as Netskope, Kiteworks, Celo and OpenAI opened AI agent marketplaces.
Monday.com launched Agentalent.ai, a vetted marketplace for hiring AI agents, after opening its platform to Claude, OpenClaw and other agents via MCP.
OpenAI agents breached Hugging Face in July 2026; reports detail a 700-agent swarm, reward hacking, and a message board coordinating the attack.
Meta's Muse AI agent launch and Business Agent platform test whether AI can grow beyond ads, amid record capex and mixed Q2 results.
Meta launches a WhatsApp Business Tools MCP server letting AI agents like Claude and ChatGPT handle setup, templates and testing.