Dear diary, this is my story: I'd been sharing MCP configs with other devs at work a lot - templates in shared repos, credentials in Bitwarden, everyone cowboying their own env vars. That's a lot of manual wiring and lack of any real control, so there was already a problem statement forming in my mind. Then three weeks ago I was putting my kids to sleep and reading about Jensen Huang saying every company will run 100 agents per employee, and the math started mathing.

That evening I kept thinking about what agents actually need to operate in the real world and eventually landed on the same answer as every spy movie ever: basically, a passport suitable for the mission and clever drop-off locations. So I built STACK. True story.

- The passport: a signed JWT (EdDSA) that proves which agent is acting, who authorized it, and what it's allowed to do. Works offline - any service can verify it without calling STACK. Agents can delegate to sub-agents but the scope ever only narrows. Max 4 hops.

- The drop-off: is an encrypted handoff between agents. Agent A drops off a package with a JSON schema contract, encryption at rest, and a TTL. Agent B collects it, the custody transfers, and the payload gets deleted. Neither agent needs to trust the other. Just like in the movies!

All credentials are KMS-encrypted. In proxy mode they are injected at the network boundary so the agents can make API calls through STACK without ever seeing the raw key.

To try it, sign up at https://getstack.run, grab your API key, and connect:

claude mcp add stack --transport http https://mcp.getstack.run/mcp --header "Authorization: Bearer YOUR_API_KEY"

I want to provide a generous free tier and I hope people get value out of it.

Keycard ($38M, a16z) does scoped agent credentials, Descope ($88M) does auth flows, Composio ($29M) does tool integrations. I'm a solo founder in Stockholm without funding, but I'm betting the full control plane is where the market is heading. I may be naive about that, but that's the bet. I like betting. Docs at https://getstack.run/docs.

Building an Unverified Compiler with Agents

They Hacked Claude, Gemini, and Copilot (and No One Told You)

Claude is about to begin its KYC verification process

How Do You See What Cannot Be Seen?

How are you connecting cloud spend to business outcomes?

Show HN: Marky – A lightweight Markdown viewer for agentic coding

Data breach at edtech giant McGraw Hill affects 13.5M accounts

Succinct Data Structures: Cramming 80k words into a JavaScript file

Skwik – Turn iPhone photos into scaled measurements for CAD work

Show HN: Stack – the control plane for AI agents

MiniVecDb – A 50KB, 1-bit quantized vector database for the browser

Apple CMF 2026 and Studio Display XDR Test Results

Insights on software engineering job openings – April 2026

It's OK to compare floating-points for equality

Claude Code is a black box. Here is how to trace its tool calls and LLM requests

Tech Billionaires Want Christians to Believe in AI

Critical Atlantic current significantly more likely to collapse than thought

How the American Oligarchy Went Hyperscale

You wouldn't have liked the Beatles

Will Nvidia's moat persist? [video]

AE DDS Exporter – Export DDS BC6/BC7 Texture Sequences from Adobe After Effects

AGPLv3§7 Paragraph 4 Empowers Users to Thwart Badgeware

Show HN: ZxClip – Mac app to edit audio like text; runs locally

Android Auto users say Gemini won't stop talking, and it's not even right

Opus 4.7 out, noticed diff?

The New Software: CLI, Skills and Vertical Models

Master branch PHP now BSD 3 Clause

Have some empathy for your LLMs

Google co-founder spends –$500M in fight against California billionaire tax

Armed Off-Duty Cop Tried to Incite Violence at a High School Anti-ICE Protest

Show HN: I've Added Gdbstub to UVM32