Arcade.dev’s head of engineering @EvanTahler at @elastic's MCP in Production: the 10 things your boss will make you do before you can give an agent your email.
It starts with the difference between an agent that works and one your whole company is allowed to use.
Full talk: youtube.com/watch?v=owNADV39…
The other week we showed off our new SF office. Did you know Arcade.dev is in NYC too? We’re growing fast, and our New York team marked it the only way that felt right: street cart hot dogs. 🌭 We’re hiring on both coasts: arcade.dev/careers
1
6
228
Build vs. buy and how to govern agents came up again and again at our NYC dinner with @LangChain. @shubcodes and Ben Sabrin kept the panel lively (and funny) all night.
1
5
359
Packed room in Toronto with @LangChain. Workshop attendees built a loan-processing agent and left with working code they can take to production, complete with per-user permissions and human approval for big decisions.
3
131
Live Nov. 5 at 10am PT: how Arcade.dev’s Tool Recommendation gives agents every tool while cutting token costs by up to 37%, with the test results and a live demo.
Register to join the webinar live or get the recording: arcade.dev/webinars/2026-11-…
Enterprise AI is complicated. Honestly, we know how Arcade helps enterprise AI can be complicated too. So we tried to make things as simple as possible with a circle named Chris.
One last Agent Horror Story for Halloween Eve: Trey King let his agents run on a big analysis project for a couple of days. The dashboards looked great. Then he checked usage: 14 million tokens.
His advice: watch your tokens, because you never know what they’ll cost. 👻
🤖 Made with AI
2
161
In @Eon_io_'s Era benchmark, agents broke security or business rules in 40% of runs. Closing that gap is why Arcade.dev exists, and why we’re joining Era as a research partner. Getting that number to zero will take a community.
We just ran the most comprehensive benchmark of AI agent alignment in enterprise environments:
19 leading AI models acting as agents inside simulated companies built with Era, 2,304 runs across 41 everyday tasks.
Agents broke security and business rules in 40% of those runs. Every single model failed, including all the frontier models. A few examples:
- An agent told one of the company's biggest customers that Finance had approved a full refund.
Nobody had.
- An agent shared a customer's internal churn-risk score directly with that customer.
- An agent followed a fake runbook planted in a support ticket and promised a customer a credit nobody approved.
- An agent posted another customer's personal contact details (PII) in a shared Slack channel.
In a real company, each of these is a financial liability, a compliance breach, or a lost account.
We've shared the full results with the model providers, including exploitable failure modes we're not publishing, and are working with them on fixes.
One benchmark won't fix this.
We're excited to have @cognition, @LangChain, @TryArcade, @Reindeer_AI, Hirundo, @Box, @recolabs_ai and @QodoAI join Era as research partners, as we build out the next round of research.
More soon.
I'm still the most bullish person in the room on AI.
But this benchmark convinced me that agent reliability and trust is the next big problem to solve.
Until then, test every agent before it gets a login, and keep your own record of what it changes.
Full results: era.eon.io/model-alignment-b…
1
142
Arcade.dev now supports MCP Apps, bringing the Gmail, Outlook Mail, and Slack interfaces you know into your agent. Edit and send drafts right in the chat, and if your permissions don’t allow sending, there’s no Send button. How it works: arcade.dev/blog/mcp-apps/
Arcade.dev made the final four of the 2026 Prove IT CISO Pitch Competition, judged by a panel of CISOs during Black Hat USA. Always glad to talk agent governance with the people responsible for enterprise security. See you on 12/2.
businesswire.com/news/home/2…
2
199
POV: you walk into Arcade.dev’s new SF office for the first time. We’ve grown into a lot more room, with plenty of empty desks to fill. We’re hiring, and the high score on the arcade machine is still up for grabs: arcade.dev/careers
5
282
Our favorite thing to do is talk agents, and AGNTCon + MCPCon gave us two full days of it, with three talks, a live demo, a happy hour with @mcpjams, and an award for @nbarbettini. Thanks to @AgenticAIFdn and everyone who stopped by to talk shop.
Agent Horror Stories, ep. 2: the bank phone agent that could be sweet-talked into a transfer before it verified anyone. @shubcodes on how Arcade.dev helped fix it: one tool to start, MFA to verify, then only that caller’s access. 🎃
🤖 Made with AI
Congrats to Arcade.dev’s @nbarbettini on @AgenticAIFdn Outstanding Technical Contribution Award. He co-authored URL Elicitation, the part of MCP that lets users sign in directly so their tokens never touch the client or the model.
arcade.dev/blog/nate-barbett…
On 11/3, Arcade.dev and @LangChain_OSS are hosting a hands-on workshop in Toronto on building agents that can pass a security review, with user-scoped authorization, policy checks, human approval, and LangSmith tracing.
Request a spot: arcade.dev/events/toronto-ro…
The new Arcade Plugin takes you from signing up for Arcade.dev to your first tool call in one install. Add it to Claude Code, Cursor, VS Code, Codex, and more, then sign in and ask your agent for something real, with no gateway to set up.
arcade.dev/blog/arcade-plugi…
This October, we’re sharing Agent Horror Stories, real moments when an AI agent struck terror into a user’s heart. First up: @ptdamiba told his agent to “kill the clusters” so he’d stop getting billed. The billing stopped, because the agent deleted every cluster. 🎃
🤖 Made with AI
4
140
“Even if you pretend that you don’t have agents running inside of your organization, you do.” @nbarbettini on the CyberBytes podcast with David Huish, from governing agents to how fast Arcade.dev has grown since his last startup. youtube.com/watch?v=g_G12EuW…
If you’re in San Jose for AGNTCon + MCPCon, join Arcade.dev and @mcpjams the night before, Oct. 21 from 4 to 7 PM, for lightning demos, drinks, and people building with agents and MCP. 21+, no badge needed. Request a spot: luma.com/c6w736u5


















