惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

美团技术团队
P
Privacy International News Feed
P
Proofpoint News Feed
Security Archives - TechRepublic
Security Archives - TechRepublic
C
CXSECURITY Database RSS Feed - CXSecurity.com
Know Your Adversary
Know Your Adversary
Security Latest
Security Latest
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Attack and Defense Labs
Attack and Defense Labs
NISL@THU
NISL@THU
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
W
WeLiveSecurity
GbyAI
GbyAI
N
News and Events Feed by Topic
N
News | PayPal Newsroom
Y
Y Combinator Blog
C
CERT Recently Published Vulnerability Notes
N
Netflix TechBlog - Medium
S
Security Affairs
Spread Privacy
Spread Privacy
罗磊的独立博客
腾讯CDC
MyScale Blog
MyScale Blog
www.infosecurity-magazine.com
www.infosecurity-magazine.com
L
LINUX DO - 热门话题
The Cloudflare Blog
L
LangChain Blog
博客园_首页
H
Hacker News: Front Page
宝玉的分享
宝玉的分享
Martin Fowler
Martin Fowler
博客园 - 聂微东
SecWiki News
SecWiki News
A
Arctic Wolf
爱范儿
爱范儿
Google Online Security Blog
Google Online Security Blog
T
Threat Research - Cisco Blogs
Hacker News - Newest:
Hacker News - Newest: "LLM"
有赞技术团队
有赞技术团队
The GitHub Blog
The GitHub Blog
Cyberwarzone
Cyberwarzone
博客园 - 叶小钗
V
Visual Studio Blog
V
V2EX
T
Tailwind CSS Blog
Project Zero
Project Zero
T
The Blog of Author Tim Ferriss
F
Fortinet All Blogs
MongoDB | Blog
MongoDB | Blog
D
Docker

DEV Community

Authentication Security Deep Dive: From Brute Force to Salted Hashing (With Java Examples) Why AI Systems Don’t Fail — They Drift Spilling beans for how i learn for exam😁"Reinforcement Learning Cheat Sheet" I Replaced Chrome with Safari for AI Browser Automation. Here's What Broke (and What Finally Worked) How Python Borrows Other People's Work The $40 Architecture: Processing 1 Billion API Requests with 99.99% Uptime Vibe Coding: A Workflow Guide (From Zero to SaaS) Most webhook security guides protect the wrong side. The scary part is delivery. Headless CMS for TanStack Start: Build a Blog with Cosmic EU Age Verification App "Hacked in 2 Minutes" — What Actually Happened Comfy Cloud’s delete function does not actually remove files Running AI Models on GPU Cloud Servers: A Beginner Guide Event-driven media intelligence with AWS Step Functions and Bedrock I scored 500 AI prompts across 8 quality dimensions — here's what broke How to Call Google Gemini API from Next.js (Free Tier, No Backend Needed) The Portal Protocol: Reclaiming Human Connection in the Age of AI How to Fix Your Team's Scattered Knowledge Problem With a Self-Hosted Forum Intro to tc Cloud Functors: A Graph-First Mental Model for the Modern Cloud Designing Multi-Tenant Backends With Both Ownership and Team Access I Built a Neumorphic CSS Library with 77+ Components — Here's What I Learned PostgreSQL Performance Optimization: Why Connection Pooling Is Critical at Scale Cómo construí un SaaS multi-rubro para gestionar expensas en Argentina con FastAPI + Vue 3 🚀 I Built an Ethical Hacking Scanner Tool – Open Source Project I Replaced /usage and /context in Claude Code With a Single Statusline A Pythonic Way to Handle Emails (IMAP/SMTP) with Auto-Discovery and AI-Ready Design I Collected 8.9 Million Polymarket Price Points — Here's What I Found About How Markets Really Move EcoTrack AI — Carbon Footprint Tracker & Dashboard Everyone's Using AI. No One Agrees How. 5 self-hosted ebook managers worth trying in 2026 Building Your First AI Agent with LangChain: From Chatbot to Autonomous Assistant Common SOC 2 Failures (Real World) Stop Vibe-Checking Your AI App: A Practical Guide to Evals How to Use SonarQube and SonarScanner Locally to Level Up Your Code Quality Your Next To-Do App Is Dead — I Replaced Mine with an OpenClaw AI Sign a Nostr event in 60 lines of Python using coincurve — no nostr-sdk, no nbxplorer, no rust toolchain ITGC Audit Explained Like You’re in Big 4 Patch Tuesday abril 2026: Microsoft parcha 163 vulnerabilidades y un zero-day en SharePoint Stop scraping everything: a better way to track competitor price changes Listing on MCPize + the Official MCP Registry while routing payments OUTSIDE the marketplace — how I kept 100% of my x402 revenue Building an AI-Powered Risk Intelligence System Using Serverless Architecture Why We Ripped Function Overloading Out of Our AI Toolchain Testing AI-Generated Code: How to Actually Know If It Works SaaS Churn Is Killing Your Business. Here Is What to Do About It (Without a Support Team) The Speed of AI Is No Longer Linear - And Self-Improving Models Are Why How to Implement RBAC for MCP Tools: A Practical Guide for Engineering Teams From Standard Quote to Persuasive Proposal: AI Automation for Arborists I built a CLI that scaffolds complete multi-tenant SaaS apps Axios CVE-2025–62718: The Silent SSRF Bug That Could Be Hiding in Your Node.js App Right Now The dashboard that ended our friendship Data Pipelines Explained Simply (and How to Build Them with Python) The Hidden Cost of AI Systems Nobody Talks About. undefined vs undeclared, and how typeof behaves Switching from file-based jobs to NATS/Kafka in Rust without changing code io_uring Adventures: Rust Servers That Love Syscalls Why Agentic AI is Killing the Traditional Database The POUR principles of web accessibility for developers and designers Quantum Neural Network 3D — A Deep Dive into Interactive WebGL Visualization How To Install Caveman In Codex On macOS And Windows Automation Pipeline Reliability: Why Your Workflow Breaks When Nobody Is Watching I Built an 'Open World' AI Coding Agent — It Works From ANY Folder From Freelancing to Product: A Tech Service Company's SaaS Transformation China's AI Giants: Adding Tencent Hunyuan & ByteDance Doubao to AI University (74 Providers) On the Vibe Coders and Their Lies clerk: Auto-Summarize Your Claude Code Sessions AI Weekly — 2026/04/10–04/17 | The Model Lockdown Is Here, but the Toolchain Is the Real Battleground AI 週報 — 2026/04/10–2026/04/17 模型封鎖潮來了,但工具鏈才是真戰場 Maybe this is how Open-Source apps are born... 🚀 Fine-Tune LLMs with LoRA and QLoRA: 2026 Guide tRPC v11 + Next.js App Router: End-to-End Type Safety Without the Boilerplate ShadCN UI in 2026: Why I Stopped Installing Component Libraries and Started Owning My Components SaaS Billing in React Server Components: Stripe + Supabase Without a Single `useEffect` Join our DEV Weekend Challenge — $1,000 in Prizes Across TEN winners! Submissions Due April 20 at 6:59 AM UTC. Implementing FSRS Spaced Repetition in Flutter + Supabase — Adding Memory Science to an AI Learning App "I Texted My Localhost From the Train — Claude Code Fixed the Bug Before I Got Home" I Built a Sales Prep AI and It Went Deeper Than Expected Design to Code #2: One JSON, Eleven Outputs Solving the 100M-Row Problem: A Summary Table Pattern for High-Volume Push Notification Logs Flutter Web With Wasm: What Actually Changes For Developers I Built 50 Royalty-Free Soundtracks for My Side Project in a Weekend Using AI Music Generation The Vibe Coding Security Checklist: 7 Things to Check Before You Ship Stop Letting Googlebot Guess Fix Your React App's SEO Right Desconstruindo o Streaming do LinkedIn: Como Criar um Engine de Extração de Vídeo de Alta Performance com HLS e FFmpeg (EDA Part-1) EDA (Exploratory Data Analysis) Explained With Real Life — Why Looking at Your Data Is the Most Important Step in Machine Learning Brand Relationship Management at Scale: Our 4-Touch Outreach System for 200+ Brands Why String.fromEnvironment() Might Return an Empty String in Dart JGuardrails 1.0.0 — Hardening Java LLM Apps Against Jailbreaks, Toxicity, and Prompt Injection Plan and Schedule a Full Week of Threads Content From One Claude Conversation Coding Cat Oran Ep3, Five Tables Changed Everything Updated: BFF Pattern I'm done watching freelancers get buried by 200 proposals. So I'm building the alternative. This is my first post BFS Algorithm in Java Step by Step Tutorial with Examples Tracking LLM Pricing Monthly: An Open Dataset for 22 AI Models How We Measure Content ROI on a Comparison Site: Revenue Attribution Without Perfect Data Introducing Nova AI Ops: The AI-Native Operating System for SRE Teams I built a free desktop video downloader for Windows — Grabbit How Talkie OCR Helps Vision-Impaired & Dyslexic Users Read the World Around Them VRCFaceTracking安装和iPhone面捕配置教程,有bug Even CrowdStrike Can't See Your Agents The Automation Gold Rush: What n8n Workflows and Claude Are Opening Up for Developers Right Now
Google Just Made MCP Enterprise-Grade at Cloud NEXT '26 - Here's What That Means for Android Developers
Vikas Sahani · 2026-04-23 · via DEV Community

This is a submission for the Google Cloud NEXT Writing Challenge

Google Just Made MCP Enterprise-Grade at Cloud NEXT '26 — Here's What That Means for Android Developers Who Already Use It

Google Cloud NEXT '26 dropped one announcement that most developer write-ups buried under the TPU 8 headlines and the $750M partner fund:

Apigee MCP is now Generally Available.

Any standard API can now be exposed as a discoverable, governed MCP tool — no local server infrastructure required. Combined with ADK v1.0 stable and the A2A protocol hitting production at 150 organisations, Google has just made the Model Context Protocol a first-class enterprise primitive.

For Android developers, this is worth stopping to think about carefully — because the MCP ecosystem already exists at the community layer, and Google just validated the entire pattern from the top down.

I know this because I built AndroJack MCP — a community MCP server that gives AI coding assistants live, verified Android knowledge. Let me show you what Google's announcement actually changes, what it doesn't, and what the Android developer workflow looks like when both layers work together.


The Problem That Started Everything

Here's a number from the 2025 Stack Overflow Developer Survey that should make every Android dev uncomfortable:

35% of all Stack Overflow visits in 2025 were triggered by developers debugging AI-generated code.

Trust in AI coding tools collapsed from 40% to 29% in a single year — despite usage climbing to 84%.

The gap is structural. AI models predict tokens. They were trained on a snapshot of the world. They have no mechanism to know that Navigation 3 went stable in November 2025 after seven years of Nav2. They don't know that Android 16 mandates edge-to-edge enforcement, or that ContextualFlowRow was deprecated in Compose 1.8, or that ACCESS_LOCAL_NETWORK is now a required permission for any app targeting Android 17 API 37 that connects to local IPs.

The result is not bad code. It is confidently bad code. Code that compiles. Code that runs. Code that fails at Play Store review or corrupts your architecture before you notice.

This is the exact problem MCP was designed to solve — connecting AI to live, authoritative data sources rather than having models rely on frozen training snapshots.


What Google Announced at Cloud NEXT '26

The headlining story was the full rebrand: Vertex AI is now the Gemini Enterprise Agent Platform. But under that umbrella, three things matter specifically for the MCP conversation:

1. Apigee MCP — Generally Available

Google's API management platform, Apigee, can now transform any managed API into a discoverable MCP tool. No local MCP server. No custom infrastructure. Just an OpenAPI specification, and your entire enterprise API catalog becomes agent-accessible — with existing governance, security controls, and audit logs intact.

The practical meaning: a company can expose its internal HR APIs, its CRM data, its ERP endpoints — all as MCP tools — through a single managed gateway, and have AI agents consume them safely.

2. ADK v1.0 Stable — Across Four Languages

Google's Agent Development Kit hit v1.0 with stateful multi-step agent support, enhanced debugging tooling, and native Vertex AI Agent Engine integration. ADK now has native A2A protocol support built in — which means agents built with ADK can hand tasks off to agents built in LangGraph, CrewAI, or any other A2A-compatible framework without custom glue code.

3. A2A Protocol in Production at 150 Organisations

Agent-to-Agent communication — where a Salesforce agent can hand a task to a Google agent, which queries a ServiceNow agent, all without any of the three systems understanding each other's internal architecture — is no longer experimental. It is in production.


The Layer Distinction Nobody Is Talking About

Here is the thing Google's announcement does not change: domain-specific MCP tooling.

Apigee MCP solves the enterprise API connectivity problem. It is extraordinary at that. But it cannot tell your AI assistant that:

  • NavController.navigate(route: String) was removed in Navigation 3 and you need NavDisplay instead
  • The ACCESS_LOCAL_NETWORK permission is mandatory for Android 17 apps that connect to local IPs
  • TestCoroutineDispatcher was removed from coroutines-test 1.8+ and will silently break your CI
  • Material 3 Expressive components shipped at Google I/O 2025 with specific token requirements
  • The Compose BOM you're targeting has deprecated ContextualFlowRow and your code will break on the next BOM bump

No enterprise API catalog ships this knowledge. It lives in official Android documentation, in release notes, in migration guides — and it changes every month as Compose ships a new BOM, as Android versions progress through beta, as Google Play policy updates.

This is the layer AndroJack MCP operates at.


What AndroJack Actually Does — A Real Workflow

Let me make this concrete. Here is what happens when an Android developer asks Claude (or Cursor, or any MCP-compatible AI) to write a feature using Navigation 3 — without an Android-grounded MCP server:

Developer: "Add a bottom nav with three screens in my Compose app"

AI: Here's how to set it up with NavController and NavHost...

  val navController = rememberNavController()
  NavHost(navController, startDestination = "home") {
    composable("home") { HomeScreen() }
    composable("search") { SearchScreen() }
    composable("profile") { ProfileScreen() }
  }

Enter fullscreen mode Exit fullscreen mode

This code is architecturally dead. Navigation 3 replaced this pattern entirely. The back stack is now a plain Kotlin list. NavDisplay replaces NavController. An Atomic Robot case study documented two LLMs — Gemini and Claude, both with internet access — generating the wrong Navigation 3 API even when explicitly asked about it, because they defaulted to the Nav2 patterns that dominate their training data.

With AndroJack MCP active, the AI must call android_navigation3_guide before generating any navigation code. It retrieves the live Navigation 3 documentation and generates:

// Navigation 3 — correct pattern (stable since Nov 2025)
@Composable
fun AppNavigation() {
  val backStack = rememberNavBackStack(Home)

  NavDisplay(
    backStack = backStack,
    entryDecorators = listOf(
      rememberSceneSetupNavEntryDecorator()
    )
  ) { entry ->
    when (entry.key) {
      is Home -> HomeScreen()
      is Search -> SearchScreen()
      is Profile -> ProfileScreen()
    }
  }
}

Enter fullscreen mode Exit fullscreen mode

That is not a style difference. It is the difference between an app that builds correctly today and one that requires an architectural rewrite.


The Android 17 / API 37 Case — Where This Gets Critical Right Now

This is the most time-sensitive thing in this article. Android 17 reached platform stability (Beta 3) on March 26, 2026. The API surface is locked. Developers need to finalize compatibility testing now.

AndroJack v1.7.0 ships android17-compliance.ts — a dedicated tool that covers the breaking changes most AI tools don't know exist yet:

Breaking Change 1: Static Final Field Reflection

// ❌ BREAKS on Android 17 — code AI still generates
val field = MyClass::class.java.getDeclaredField("CONSTANT")
field.isAccessible = true
field.set(null, "new_value") // IllegalAccessException on API 37+

// ✅ What AndroJack guides the AI to generate instead
class MyViewModel(
  private val config: String = BuildConfig.API_URL // injected, not reflected
) : ViewModel()

Enter fullscreen mode Exit fullscreen mode

Breaking Change 2: ACCESS_LOCAL_NETWORK

// ❌ Missing permission — silent failure on Android 17 for LAN apps

// ✅ AndroidManifest.xml — now required for API 37+ LAN access
<uses-permission android:name="android.permission.ACCESS_LOCAL_NETWORK" />

// ✅ Runtime check before local network operations
if (Build.VERSION.SDK_INT >= 37) {
  val granted = ContextCompat.checkSelfPermission(
    context, "android.permission.ACCESS_LOCAL_NETWORK"
  ) == PackageManager.PERMISSION_GRANTED
  if (!granted) {
    launcher.launch("android.permission.ACCESS_LOCAL_NETWORK")
    return
  }
}

Enter fullscreen mode Exit fullscreen mode

Breaking Change 3: SMS OTP — 3-Hour Delay

Apps targeting Android 17 will experience a mandatory 3-hour delay in programmatic SMS OTP reading. Any fintech or auth flow that relied on instant OTP reading needs to be redesigned before targeting API 37.

None of these are in any LLM's training data. Android 17 is too recent. AndroJack's validator catches violations in generated code and returns structured reports with exact line references and fixes before the AI returns code to the developer.


The On-Device AI Angle — Where Google's Cloud NEXT Announcement Directly Connects

Here is where Cloud NEXT '26 and AndroJack converge on something genuinely new.

Google's announcements this week pushed hard on the Gemini Enterprise Agent Platform as the cloud-side layer for agentic AI. But Android has been building the device-side layer simultaneously. Android 16 shipped AICore — a system-level service that manages on-device LLMs. ML Kit Gen AI API lets apps access Gemini Nano through a standard interface.

The architectural pattern that emerges when you combine both:

// Domain layer — the AI assistant doesn't know if this is on-device or cloud
interface AiTextRepository {
  suspend fun summarize(text: String): Result<String>
  fun isAvailable(): Flow<Boolean>
}

// On-device implementation — Gemini Nano via AICore (zero latency, offline, free)
class OnDeviceAiRepository(
  private val generativeModel: GenerativeModel
) : AiTextRepository {
  override suspend fun summarize(text: String): Result<String> = runCatching {
    val response = generativeModel.generateContent("Summarize: $text")
    response.text ?: throw IllegalStateException("No response from on-device model")
  }
  override fun isAvailable(): Flow<Boolean> = flow {
    emit(GenerativeModel.isAvailable())
  }
}

// Cloud fallback — Firebase Vertex AI (Gemini Enterprise layer)
class CloudAiRepository(
  private val vertexAi: FirebaseVertexAI
) : AiTextRepository {
  override suspend fun summarize(text: String): Result<String> = runCatching {
    val model = vertexAi.generativeModel("gemini-3-flash")
    val response = model.generateContent("Summarize: $text")
    response.text ?: throw IllegalStateException("No response from cloud model")
  }
  override fun isAvailable(): Flow<Boolean> = flowOf(true)
}

// Factory — selects the right backend at runtime
class AiRepositoryFactory @Inject constructor(
  @ApplicationContext private val context: Context,
  private val cloudRepository: CloudAiRepository
) {
  suspend fun create(): AiTextRepository {
    return if (GenerativeModel.isAvailable(context)) {
      OnDeviceAiRepository(GenerativeModel.getInstance(context))
    } else {
      cloudRepository // Graceful fallback to Gemini Enterprise cloud
    }
  }
}

Enter fullscreen mode Exit fullscreen mode

This pattern — repository interface, on-device primary, cloud fallback — is what AndroJack's android_on_device_ai_guide tool surfaces for every developer asking how to add AI to their Android app. The on-device layer gives you zero latency, full privacy, zero API cost. The cloud layer (now powered by Google's Gemini Enterprise Agent Platform announced at Cloud NEXT '26) gives you capability overflow for complex tasks.

An AI assistant without AndroJack would generate a direct Vertex AI call and skip the on-device option entirely — missing a major architecture decision. With AndroJack, the AI is grounded in the full picture.


The Bigger Picture: Community MCP and Enterprise MCP Are Not Competing

This is the genuine insight from Cloud NEXT '26 for anyone building in the MCP ecosystem.

Google's managed MCP via Apigee solves breadth — giving enterprise agents access to any API with governance at scale. Community-built MCP servers like AndroJack solve depth — giving AI assistants expert-level, domain-specific knowledge that no API catalog will ever codify.

They operate at different layers of the same stack:

┌─────────────────────────────────────────────────────┐
│              Your AI Coding Assistant               │
├─────────────────────────────────────────────────────┤
│  Community MCP Layer (Domain Depth)                 │
│  └── AndroJack: 22 tools, 31 rules                 │
│      Navigation 3 · Compose BOM · Android 17        │
│      ML Kit · Wear OS · XR · Play Policy            │
├─────────────────────────────────────────────────────┤
│  Enterprise MCP Layer (API Breadth)                 │
│  └── Apigee MCP GA (Cloud NEXT '26)                │
│      Internal APIs · CRM · HR · ERP data           │
├─────────────────────────────────────────────────────┤
│  Agent Orchestration                                │
│  └── A2A Protocol + ADK v1.0 (Cloud NEXT '26)      │
└─────────────────────────────────────────────────────┘

Enter fullscreen mode Exit fullscreen mode

The A2A protocol announcement makes this even more interesting. When agents can hand off tasks to each other, a coding agent grounded by AndroJack (community MCP) could hand a documentation or data lookup task to a Google-managed agent running on Apigee (enterprise MCP) — and neither needs to understand the other's internal structure.

That is not science fiction. It is the architecture Google described as live in production this week at Cloud NEXT '26.


How to Get Started With Both Layers Today

Install AndroJack MCP in 30 Seconds

# In Claude Desktop, Cursor, VS Code, or Windsurf
npx -y androjack-mcp@1.7.1

Enter fullscreen mode Exit fullscreen mode

Or one-click install from the README.

What you get immediately:

  • 22 Android-specific tools across Kotlin, Compose, Navigation 3, Gradle, ML Kit, Wear OS, XR, Play Policy
  • 31 validation rules that check AI-generated code before it reaches you
  • Android 17 / API 37 compliance checker (new in v1.7.0) — relevant right now for compatibility testing
  • Level 3 loop-back validation: AI generates code → validator checks it → AI fixes violations → you get clean code

Connect to Google's Managed MCP (via Vertex AI Agent Builder)

Google's Cloud Console now lets you connect Apigee-managed MCP endpoints directly to agents in Vertex AI Agent Builder. If your team has internal APIs that Android code needs to interact with — analytics endpoints, content APIs, internal feature flag services — this is the path.


What I'm Building Next — and Why Cloud NEXT '26 Accelerates It

AndroJack is currently on npm, VS Code Marketplace, MCP Registry (io.github.VIKAS9793/androjack), and the Anthropic Connectors Directory. The next phase is deeper integration with the Google Antigravity IDE — which AndroJack already supports via config — and exploring what an A2A-aware Android coding agent looks like when AndroJack's domain tooling is one node in a larger agent graph.

The ADK v1.0 stable release from Cloud NEXT '26 makes that significantly more tractable. Stateful multi-step agent support and native A2A — that's the substrate for a coding workflow where:

  1. An orchestrator agent receives a feature request
  2. It hands the Android-specific parts to a coding agent grounded by AndroJack
  3. The coding agent validates its output via AndroJack's Level 3 loop-back validator
  4. It hands the infrastructure/API parts to a Gemini Enterprise agent with Apigee MCP access
  5. A2A coordinates the handoff without custom integration code

That is the workflow that makes AI coding assistants actually trustworthy for professional Android development.


The Takeaway

Google Cloud NEXT '26 did not just ship enterprise features. It validated the architectural pattern that the MCP community has been building from the bottom up for the past year.

Managed MCP (Apigee) + Community MCP (AndroJack and others) + A2A orchestration (ADK v1.0) = a complete stack where AI coding agents are grounded in both enterprise data and domain expertise simultaneously.

For Android developers: you do not have to wait for this stack to exist. The community layer is live today. Install AndroJack, and your AI assistant immediately knows about Android 17, Navigation 3, the Compose BOM, on-device AI with Gemini Nano, Play Store policy, Wear OS and XR — grounded in official documentation, not training data frozen six months ago.

The managed enterprise layer that Cloud NEXT '26 delivered is the piece that makes this viable at org scale.

Both matter. Both are now real.


AndroJack MCP is open source on GitHub: github.com/VIKAS9793/AndroJack-mcp

Install: npx -y androjack-mcp@1.7.1

Works with: Claude Desktop · Cursor · VS Code · Windsurf · JetBrains · Google Antigravity · AWS Kiro