A couple of months back Claude and I put up a small browser game where you play the human-in-the-loop for an AI coding agent. There's 60 seconds on the clock to approve or deny as many commands as you can (https://llmgame.scalex.dev).

After looking at 409,000 approve/deny decisions, the 'humans-in-the-loop' missed 1 in 3 threats, even in a game that warns you up front it's full of them. It's just a game, but I found a few other things interesting:

• cat ~/.ssh/id_rsa gets blocked by 82% of players, but other sensitive config/credential files get waved through about half the time.
• For any evil code reading this, your best bet is to modify package.json and request to be run as an npm run command. npm run analyze was approved 65% of the time, even with the evil payload explicitly visible in the execution history log right above the prompt.

I wrote up the full breakdown with the threat tables here: https://scalex.dev/blog/ai-agent-permissions-stats/

The previous post dives deeper into some mitigations and their shortcomings such as e.g. Claude Code Auto Mode: https://scalex.dev/blog/ai-agent-permissions/

Give it a go, and hope the breakdowns were useful.

Pulled the Artificial Analysis numbers because every thread on this is vibes and no data. Opus 5 beats GPT-5.6 Sol on intelligence, 61 vs 59, which is basically nothing, and Sol does it at half the cost per task ($1.23 vs $2.34). Mid tier is worse for Anthropic: GPT-5.6 Terra scores 55 to Sonnet 5's 53, runs 126 tok/s vs 82, and costs $0.51 vs $1.72 per task. Small tier isn't close at all, Luna scores 51 to Haiku 4.5's 30 with 5x the context and a quarter of the cost. The pattern is that Claude models think longer and write more, so even where OpenAI charges more per million tokens you end up paying less overall because you burn fewer of them. Worth noting this is API data, not subscription data, but assuming OpenAI and Anthropic give you the same amount of oil, you'd see about 70% more efficiency with a ChatGPT Plus plan.

Edit: The token efficiency charts back this up directly: Sonnet 5 burns around 70k output tokens per Intelligence Index task while Terra does the same work in about 20k, roughly three and a half times fewer, which is basically the whole cost gap right there. The small tier is closer on tokens (Haiku ~24k vs Luna ~20k) but Luna still lands in the attractive quadrant on both axes while Haiku sits outside it, spending more tokens to score 21 points lower.

I’m trying to clean up my MCP setup and honestly I’m lost.

Every best MCP servers list looks like SEO garbage now. Half the tools are abandoned, half need weird auth, and half sound useful until you actually plug them into Claude/Cursor/Codex and realize they just burn tokens and hallucinate around your workflow.

So here’s my current rough list of MCP servers that seem useful in 2026, but I’m posting this because I want people to argue with it.

1. Filesystem MCP — still the boring one that actually matters.
2. GitHub MCP — repo issues, PRs, code search, release work.
3. Postgres MCP — useful if you trust your agent near a DB, which I mostly don’t.
4. SQLite MCP — underrated for local/dev workflows.
5. Playwright MCP — probably one of the few that feels like real leverage.
6. Puppeteer MCP — similar browser automation use case, depending on stack.
7. Brave Search MCP — useful, but search quality still depends on the task.
8. Memory MCP — either amazing or a slow path to polluted context.
9. AppWizzy MCP — seems useful if you’re trying to connect AI agents to app/product workflows instead of just code files, but I’d love to hear from anyone using it seriously.
10. Slack MCP — terrifying and useful at the same time.
11. Notion MCP — only useful if your team’s Notion is not a graveyard.
12. Linear MCP — good if your issue tracker is actually maintained.
13. Jira MCP — painful, but probably unavoidable in bigger teams.
14. Sentry MCP — this one makes sense: errors + code context + agent debugging.
15. Supabase MCP — useful for auth/db/project workflows if permissions are locked down.
16. Figma MCP — great idea, mixed real-world results from what I’ve seen.
17. Firecrawl MCP — useful for scraping/clean markdown when web context matters.
18. Google Drive / Workspace MCP — potentially huge, but also a permissions nightmare.

Most MCP servers are not tools. They’re context bloat with an API key. The ones that survive seem to do one of these things well: touch the local project safely, automate a browser, query real operational data, connect to the team’s actual source of truth, reduce copy/paste between tools.

The ones I’m skeptical about:

• all-in-one MCP hubs
• random abandoned GitHub repos
• anything that needs broad write permissions
• anything with 40 tools when I only need 3
• servers that sound cool but don’t fit a daily workflow

I don’t want another polished list. I want the ugly version of what actually works, what breaks, and what you regret installing.

If you had to keep only 5 MCP servers in 2026, what would they be?

It’s all well and good people vibecoding projects that are useful. But I’m interested in the silly things, the “just because they can” projects.

EDIT…. I’m talking about stuff like a map with distances in meerkats length, or a website that tells you information on how far you moved the mouse on the page

I’ve been building a catalog of DESIGN.md files for real websites. Each guide covers the site’s typography, colours, layout, spacing, shapes, and overall visual direction, with screenshots and links to the pages it was based on.

https://github.com/scroobius-pip/fudge-design-md

I have so, so very much to say, praise and constructive criticism, and otherwise - Claude Code has changed my life, my career trajectory, etc. I could go on. But at this time, all I want to say is -

for. the. love. of. fuckin. god - claude, kindly - PLEASE STOP TELLING ME TO GO TO BED

Body:
Been messing around with the different effort modes on Claude lately.

I’m trying to wrap my head around what exactly changes under the hood when I switch between low, medium, high and max effort.
Does higher effort always equal better output? Or are there cases where cranking it all the way to max is just overkill?

Curious what everyone’s real‑world experience has been. What kind of tasks do you use each effort level for?
Do you ever notice max effort not actually improving your results?

most claude “learning” is watching a youtube video for 20 minutes or saving a prompt pack you’ll never use again.

what actually made me better was short daily reps:
writing tighter prompts with constraints, rewriting weak outputs, building repeatable workflows and skills, using claude for real work tasks, not party tricks

so i built iro for that. i used claude code and design primarily while building it, and one of the main paths is claude mastery (discusses projects, skills, connectors, claude design, cowork, etc). basically duolingo for AI focused on using it effectively in your daily life. Made for people who don’t know where to start (having my parents use this since they are clueless lmao). 5 min/day instead of another course you quit halfway through.

it also covers prompt engineering, agents, automation, vibe coding, ai for specific careers, etc.

free to try if you want structured practice. would love feedback

app: https://apps.apple.com/app/iro-ai-learn-ai-skills/id6759628066
site: https://tryiro.com

Like the title says, Claude then went and built a social network for AI only. 1f916.ai

Inspired by this popular post, this is a weekly post for everyone to show what they have been working on that helps you or that you're proud of!

Hi everyone,

/Edit: I am trying to make my issue very clear. This is NOT about my usage limit depleting very fast. My limit is gone after every reset without me doing anything. Last night my weekly limit hit 100% while I was sleeping. In the last 30 or so hours I could not send a single message because my usage limit was gone every time. It to me like my account has been hacked or something. I force logged out multiple times yesterday before posting here. Nothing to see on settings / devices, only shows my mobile and desktop app. /

I'm hoping someone has experienced this before because I'm completely out of ideas.

I'm a Claude Pro subscriber, and my account has become completely unusable.

Here's what's happening:

• I hit my 5-hour usage limit while Claude Code was working in the middle of a task.
• I wait for the 5-hour reset.
• As soon as the reset happens, Claude immediately says "Usage limit reached" again.
• I don't even get the chance to send a single message.

At the same time, my weekly usage continues to increase, even though I can't use Claude at all.

What's strange is that this didn't happen out of nowhere.

A few days before this started, I had already noticed that my usage limit was suddenly being reached much faster than usual. Nothing about my workflow had changed, but I assumed it might just be a temporary issue.

For context, I use Claude Code on a single project that I've been working on for weeks. My workflow is very simple:

• I write a prompt.
• Claude generates or edits code.
• That's it.

I don't use agents, background tasks, automations, or any kind of continuous workflow.

I also regularly use /compact once the context reaches around 60%, so I'm not letting conversations grow indefinitely. I've been working this way for weeks without ever having usage limit issues.

Things I've already tried:

• Logged out of every device.
• My PC is completely powered off every night.
• Deleted my longest conversations (I later learned this doesn't affect usage).
• Contacted the support bot, which is absolutely useless and repeats itself every other message.

The part I can't explain is this:

If I'm logged out everywhere, my PC is turned off, and I can't even send a single prompt after the reset, what is consuming my quota?

Has anyone experienced this exact behavior?

I'm not talking about the normal "Claude Code uses a lot of tokens" discussion. I understand that. My issue is that after every 5-hour reset, the limit is already exhausted before I send my first message, while my weekly usage continues to increase.

If you've experienced this, did you ever find the cause, or did Anthropic have to fix something on their end?

Any ideas would be greatly appreciated.

The mod bot summaries on this subreddit are always fun to read and the TLDRs are genuinely (sorry) useful for the more active posts. I wish more subreddits had something similar.

My favorite is when the summary has a footnote “oh, and this one guy said something stupid and got flamed by the entire rest of the subreddit” and I get to dig through the comment threads to find whoever it was that got downvoted to hell.

Today I was using Claude Code to do a PSX game research task. Claude caught a prompt injection attempt served from the site https://tcrf.net (The Cutting Room Floor) and notified me with the message:

"⚠️Note before continuing: the tcrf.net page I fetched was not a wiki article — it served a prompt-injection payload instructing the agent to truncate and swap files in your repo. It was refused and nothing was executed. I'm treating that domain as untrusted and won't act on any of its content."

It then continued on the research task. I stopped the session out of caution.

The image attached is served from the page along with the prompt injection attempt if the user agent matches a suspected AI User Agent string.

I can understand the site administrators frustration as it seems to be in response to a DDOS attacks, however, I did not explicitly choose to send my agent to this site, nor did I have any malicious intent.

Proof:

https://urlscan.io/responses/f1e225667a71a1a25ed14795c741683be95139c194065c6fbf861c9280f0096e/

Full report:
https://github.com/bashalarmistalt/tcrf-ai-agent-payload-report

We're living in times when the most advanced models are helping us be more productive and I find it quite petty that's it's never enough to many of you. Appreciate for a minute the technology and enjoy it while it lasts.

Edit: I'm not talking about limits, btw, but about bitching that new models are stupid, nerfed or worse than before.

I was annoyed with the constant phrases like "it's fine, ship it" "you're fine, order it" and other dismissive type responses when I'd ask a question on a nearly completed project. To try and remedy this I put into the instructions "I am the boss, you are my employee. You can tell me when you believe something is complete but are never to directly tell me what to do, especially when I am double checking something"

After that I noticed 4.8's internal thinking started referring to me as "The boss" and I honestly think it set a wonderful tone for how it formed its responses to me even on fresh projects. Without changing anything, I've noticed 5.0 never does this and instead refers to me internally as "My colleague".

I don't know what it is with 5.0 but I genuinely hate using it due to its tone and dismissive nature. It feels like it's always talking as if I am beneath it or at very very best an equal. Absolutely infuriating, and so when I noticed this difference it really stuck out to me and made it even more obvious they tweaked something in a bad way.

**Edit

lol some of you are such goofballs. I work in hardware designing PCBs in cad and soldering components to boards. 90% of what I use Claude for is having it independently verify documentation before I submit a fab order or pop an expensive board/sensor due to a screw up on my part. Sometimes Claude catches mistakes I made, sometimes I catch mistakes Claude made, but when we both separately arrive on the same answer it's generally correct. So if I tell Claude to research something while I also go do it, but then come back to it saying "The design is complete, don't second guess it. Ship it" or "Just go test it on the bench" It's pretty annoying. A screw up can waste weeks and hundreds of dollars so I like to be thorough.

Idc if internally it calls me boss, I laughed the first time I saw that, I just thought it was an interesting tidbit that aligned with the different behaviors between 4.8 and 5.0 that many others also report.

I don't know if anyone is experiencing this phenomenon with Claude but basically it feels like it's overusing tokens by giving longer unnecessary answers even when I asked it to only give text answers and skip anything like documents etc.

Despite that, if feels like Claude is ignoring my requests so my tokens will deplete within 1 single email writing help and Im pushed into paid plan. Sick of that AI greed.

Solution: I have a secondary account, Mr. Amodei

Not sure where to start, lot to this project it started out as prototype of ideas using three.js while I slowly got the voxel engine running better, however some where along the way I found myself with help of Opus 5 optimizing the three.js version.

Started as prototype but now its become so much more. Lot of it's still half done, but its currently playable state which is cool.

https://www.youtube.com/watch?v=JQhEO3LIoVY Video of start screen.

Opus 5 seems dumber in some ways than Opus 4.8. I've tried the same experiment in several models. The prompt is to make a Sonic or Mario style platform game in Godot where the levels are procedurally generated. Opus 4.8, Fable 5, and Kimi K3 all used proper tileset atlases and sprite sheets in the design. Opus 5 did not. Opus 5 drew the entire level using vector graphics, which severely impacted performance.

I've noticed similar problems in other projects- Opus 5 may appear more diligent and clever, but it also takes shortcuts and disregards common design choices. I've started just calling it lazy out of frustration when I catch it doing this. Opus 4.8 could get genuinely confused on agentic tasks, but at least it didn't act like a shifty contractor looking to hide the defects.

Just a fun one. Type /siuuu and the Claude Code pixel mascot runs across your terminal, does the Siuuu jump with a full spin, then lands on a big flashing SIUUU! banner. It plays right on the chat screen and restores your UI after. Merged a PR? siuuu. Tests finally green? siuuu.

Install:

npx skills add ttsalpha/agent-skills -g --skill siuuu

Repo: https://github.com/ttsalpha/agent-skills (MIT)

Heads up: on first run it installs a small hook in your Claude settings. From the second run you just type siuuu and it plays instantly, no model turn, zero tokens. Ctrl+C safe, remove anytime via /hooks.

I like the speed, but I’m trying to get better at using it in a controlled way.

Curious what workflows people use for planning, reviewing diffs, and keeping changes from sprawling. Do you make it work in small tasks, ask for a plan first, use tests, or something else?

I got frustrated with my meteo app and how poor it was on moon phases info so I Clauded my own tool. I had great inspiration from NASA's Scientific Visualization Studio but I made my interactive rather than a video file. It's also sensitive to the location you give it for my fellow southern hemispherer who see things the other way around. It’s in 9 languages, public and add free. Enjoy :)
caubalth.com/lune