Pi cuts MCP token bloat by hiding tools behind Codemode sandbox
Pi 1.0 integrates MCP servers but keeps tool definitions out of the prompt, using a JavaScript sandbox to discover and execute tools only when needed.
Daily coverage of AI, developer tools and infrastructure. Each story explains what happened and why it matters, with a link to the original source.
Pi 1.0 integrates MCP servers but keeps tool definitions out of the prompt, using a JavaScript sandbox to discover and execute tools only when needed.
Attackers are exploiting CVE-2026-61500 in Rejetto HTTP File Server to forge admin sessions and execute code. The bug stems from a predictable pseudo-random number generator.