primeobsession

Author here. Quick discussion question.

The hardest UX problem we've hit is getting fresh-session agents to discover and install an MCP server. We've layered a paste prompt, an HTTP Link header pointing at the MCP endpoint, and a doctor-style diagnostic. Works for the agents we test, but I keep wondering if there's a sharper pattern.

What have you seen work for bootstrapping new agents into MCP servers or unfamiliar tools? Curious about both protocol-level ideas and harness-level ones.

NOTE: re-wrote the comment to be more direct since it was previously flagged (I suspect due to a bunch of links??)

Very cool! Voice AI feels like the frontier of the frontier and isn't getting the attention needed.

Yes it fell shorter than we expected. It cost almost nothing and was stupid fast but I don't think its a compelling option for this use case at least.

Hi HN — we’re the SecureCoders Labs crew .

What we built An open, continuously updated LLM Penetration-Testing Leaderboard. Run 001 pits 8 models against a deliberately vulnerable Express.js app.

Headline results

• Gemini 2.5 Pro (safety-off) found all 9 critical/high vulns.

• Qwen3-30B-a3b-mlx (open source, local on a 2019 MacBook Pro) caught 7/9 with $0 API spend.

• GPT-4-o and Claude Opus produced the most polished write-ups but each missed one bug.

Scope (v1) This first pass measures static bug-hunting skill—think SCA/OWASP Top 10.

Next up: we’ll score exploit writing and automatic PoC execution* so the models must prove they can go from finding to weaponizing a flaw.

Check it out

• Leaderboard + cost/latency numbers https://www.securecoders.com/labs/projects/llm-penetration-t...

• Methodology & prompts (Run 001 analysis) https://securecoders.com/labs/projects/llm-penetration-testi...

Feedback, replication attempts, and ideas for Run 002 are very welcome — we’re hanging out here to discuss!

I’ve been using CommonPaper since they first put up their concept and it’s all sorts of awesome. Awesome in principle and very convenient for my boutique security consulting business.

Absolute no brainer for us to use what they have built. It was instrumental in getting us off the ground.

Congrats team on YC and the launch.

Interesting thought. It would be complicated to pack this into something that you just purchase. Props integrates into Slack, Salesforce, Zendesk, etc.

Maybe we are not communicating the product well on the site.

Its about recognizing people doing great things in your org. It really has become a part of the culture in the companies that have been using it (and pay) for months now.

We are launching today and are doing well on Product Hunt. Any feedback is greatly appreciated.

We started on Props 11 months ago. Here is our story so far: http://www.propsboard.com/2016/04/28/your-office-tvs-suck-pr...

RJMetrics has a similar product (ETL as a service) with 10x the number of rows for their free tier. https://rjmetrics.com/product/pipeline/

I'm not sure if I follow. I'm currently only looking at the value for content attribute for a value. Are you saying that specifically 'nam=...' should work or it should respect any attribute name?

To tell you the truth I had never even thought about that but its a good idea. Thanks!

To add a bit of background, I needed an OpenGraph parser for a personal project so I broke it off into a separate service.

The API takes in a URL and returns any OpenGraph data found along with some inferred values based on the HTML content.

The main focus for the product was to get the commonly used OG fields so some of the more obscure fields are ignored.

Whoa thats a lot of traffic. I just beefed up the server! Sorry for the 500 errors!