Last week, we open-sourced the ToolHive Desktop UI to make it easier and more secure to install, manage, and run #MCP servers. We would love your feedback! If you like the project, show your support ⭐ github.com/stacklok/too...

The Toolhive team just dropped a major release that includes a slick client app to support the path for production MCP server hosting. Check it out at toolhive.dev

Running #MCP servers just got even easier with today's launch of the ToolHive desktop app! Run MCP servers and connect them to your AI clients using a simple, streamlined UI. Check out this demo video, and download it today at toolhive.dev!

I’m thrilled to finally share what we have been cooking 🔥 up at @stacklok.com Today we released ToolHive UI to help enterprise developers find and run pre-packaged MCP servers, or configure and deploy any custom server 🚀 github.com/stacklok/too...

If you are looking for an improved #mcp experience. We updated 🚀 ToolHive this week : ✅ Now on winget (Windows support) 📊 Full #OpenTelemetry for MCP proxies 🔐 Improved audit logging, OIDC, SSE ⚙️ Parallel test support + better API handling github.com/stacklok/too...

Spring AI M7 just released! spring.io/blog/2025/04... here are some of my favorite features: 🧵

ToolHive is leaving the hive! 🐝 We’ve open sourced ToolHive to help you run MCP servers easily and securely. Check out the announcement and project: dev.to/stacklok/too... #oss #ai

Super excited!

Feels weird to post about the little stuff at the moment, but I'm talking at both Devnexus and JavaOne this year about debugging issues. I'm very happy with the way the presentation is coming together. Distilling 10 years of tracker content into 60 mins is pretty challenging!

Developing AI apps using Spring? Check out @bdussault.bsky.social's post to see how easy it is to safeguard PII in your workflows by integrating Spring AI with CodeGate! #OpenSource #CodeGenSec #AI dev.to/stacklok/acc...

I've been spending quite a bit of time exploring AI workflows and building AI applications. I wrote a short blog post on my latest experiment which combines two exciting open source projects -Spring AI and CodeGate. dev.to/stacklok/acc... #java #springboot #SpringFramework #ai

About a week ago, I started work on this MCP Server. It's the latest incarnation of an MCP Server I've created several times before. This time I started fresh to build it with the new stuff coming in Spring AI 1.0.0-M6. And for grins, I chose to write it in Kotlin. github.com/habuma/tpapi...

What are some good resources for Java and Spring AI prompts that folks find useful? #java #springboot #SpringFramework cc @starbuxman.joshlong.com

How to be a critical thinker: 1. Be 10% more skeptical of people you agree with—and 10% more charitable to those you disagree with 2. Find flaws in ideas you like—and strengths in views you dislike 3. Discount sources that peddle one narrative—and learn from those that explore competing ideas

🚀 OpenSSF is securing the open source ecosystem! With over 100 members and thousands of contributors, we’re shaping the future of secure software development.📥 Download the Annual Report to see our impact in 2024: hubs.la/Q0318XDQ0 #OSS #OpenSSF #SoftwareSecurity

Want to deploy 136,000 times daily like Amazon? It starts with breaking down complexity. Here's the framework: https://buff.ly/4gKk7gI

🌐 “Decentralized AI can rebuild trust in the Internet.” — Hilary Carter, SVP of LF Research Her blog covers: ✅ Decentralized computing for privacy and control. ✅ Open collaboration to shape the Web’s future. ✅ A vision for a human-centered digital world. 🔗 Read more: hubs.la/Q030NGGW0 #OpenSource

@owasp.org just published an updated LLM & Gen AI Security Landscape genai.owasp.org/resource/llm...

An open source funding report from @github.com, @harvard.edu, and @linuxfoundation.org researchers highlights that organizations worldwide contribute over $7.7 billion (2023 USD) annually to OSS. opensourcefundingsurvey2024.com#key-finding-...

Fake stars on GitHub aren’t new but this research highlights 4.5 million fraudulent stars were discovered www.techzine.eu/news/securit... via @techzine

Minder OSS has a number of good first issues github.com/mindersec/mi... #GoodFirstIssue #golang #openssf

Based on a few recommendations, I'm starting to read @andrewhl.bsky.social 's book www.oreilly.com/library/view... I'm particularly interested in concepts of fast flow and decentralized decision processes.

Criticizing is fast and easy. Creating is slow and difficult. The two hours you spent on a book or movie took someone two years to produce. Anyone can tear down someone else's work. The true test of insight is whether you can help them improve it or build something of your own.

One of the most reliable ways to improve our mental health is to help others. After being randomly assigned to do just 3 acts of kindness a week, people felt significantly less depressed, anxious, and lonely. Lifting others up elevates us too. Giving shows us that we matter.

I was hoping to hit 1000 followers here on Bluesky by the new year. I’m only 12 away (from what I fully recognize is a purely arbitrary milestone). Maybe if I get 12 more today I can still count it?

Organization design is tricky and I agree with the article's position that "Rather than viewing cognitive load as simply another metric to track, leaders are encouraged to see it as a fundamental consideration in organizational design and team structure" itrevolution.com/articles/tea...

I sat down with Craig and went through where CodeGate is and where they are thinking of taking it. It’s a super interesting idea to have, in some sense, a local firewall for filtering what your machine is sending out to these services.

Super excited to announce codegate.ai. Docker run your way to a local security and privacy solution for codegen tools. Oh, it is also OSS.

Today we launched CodeGate 🔥 as the first open source, locally deployed privacy controls for AI-enabled developers. Check out @lukehinds.bsky.social overview: www.youtube.com/watch?v=SkKX...

It's been really exciting to be involved with this project, and amazing to see how quickly it went from idea to reality! If you use GitHub Copilot or @continue.dev in your coding workflow, you really should check out #CodeGate!

Today we introduced CodeGate — local, open source privacy controls that work with your AI coding assistant. CodeGate is a single container that you deploy locally, so secrets never leave your desktop and risky dependencies are kept out of your code. Explore at codegate.ai #OpenSource #DevTools

Happening now! www.youtube.com/watch?v=j0ku...

This is a great use of AI www.npr.org/2024/12/10/n...

Your worth is not defined by what you achieve or acquire. It’s a question of who you become and how you contribute to others. Self-esteem should come from character, not success or status. The highest accomplishment is to be a person of generosity, integrity, curiosity, humility, and wisdom.

I wish managers would stop thinking about their relationship with employees through the lens of finite game theory. The median tenure of employees in the US public sector is 3.9 years. West Coast tech is probably 1-2 years. Great relationships span decades. See the human being and invest in them.

For our next #MinderMonday Staff Engineer @jaosorior.dev dives deep into Minder’s view of the world & explains the different concepts it introduces (Entities, Providers, Data Sources...) to map your #SupplyChain & secure it. Dec. 16 at 9:30am ET | 2:30pm GMT Sign up: www.meetup.com/stacklok-use...

at @stacklok.com we are going to shortly be releasing an OSS project focused on AI CodeGen security. I have not been this excited about a project since sigstore. If this is a problem you care about and would like to know more, drop me a message. Would love to gather the thoughts of others

@stacklok.com's Poppaea McDermott presented at SigstoreCon in Salt Lake City last month. Check out her presentation 'Sigstore-Powered Hunting: Uncovering North Korean APT Attacks on the OSS Supply Chain' 🔥https://www.youtube.com/watch?v=YebShPM96r0

I have an exciting opening on my team building out @stacklok.com's developer experience. If you have experience building extensions for @vscode.dev, language server protocol and have a passion for building tools that developer's love ❤️, please connect: job-boards.greenhouse.io/stacklok/job...

This is the way. Mainframe era: Vertically integrated; closed system Client server era: open(ish) ecosystem on two monopolies (Intel/Microsoft). Cloud era: Vertically integrated with ecosystem as a neccessary afterthought. GenAI era: ? I vote for open ecosystem.