惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

S
Security @ Cisco Blogs
H
Hacker News: Front Page
P
Privacy International News Feed
N
News and Events Feed by Topic
T
Threatpost
Simon Willison's Weblog
Simon Willison's Weblog
S
Schneier on Security
K
Kaspersky official blog
S
Secure Thoughts
V2EX - 技术
V2EX - 技术
Security Latest
Security Latest
钛媒体:引领未来商业与生活新知
钛媒体:引领未来商业与生活新知
www.infosecurity-magazine.com
www.infosecurity-magazine.com
C
CERT Recently Published Vulnerability Notes
L
Lohrmann on Cybersecurity
Jina AI
Jina AI
P
Proofpoint News Feed
AI
AI
雷峰网
雷峰网
T
Tailwind CSS Blog
Engineering at Meta
Engineering at Meta
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
D
Darknet – Hacking Tools, Hacker News & Cyber Security
Recent Commits to openclaw:main
Recent Commits to openclaw:main
cs.AI updates on arXiv.org
cs.AI updates on arXiv.org
博客园 - 叶小钗
Webroot Blog
Webroot Blog
Apple Machine Learning Research
Apple Machine Learning Research
SecWiki News
SecWiki News
罗磊的独立博客
N
Netflix TechBlog - Medium
Martin Fowler
Martin Fowler
Google DeepMind News
Google DeepMind News
Cyberwarzone
Cyberwarzone
MongoDB | Blog
MongoDB | Blog
博客园 - Franky
Schneier on Security
Schneier on Security
The GitHub Blog
The GitHub Blog
S
Security Affairs
Blog — PlanetScale
Blog — PlanetScale
Last Week in AI
Last Week in AI
P
Proofpoint News Feed
月光博客
月光博客
D
Docker
OSCHINA 社区最新新闻
OSCHINA 社区最新新闻
S
Securelist
W
WeLiveSecurity
T
Troy Hunt's Blog
A
Arctic Wolf
博客园 - 司徒正美

The Register - Special Features: Agentic AI

Unaccounted-for AI agents are being handed wide access Google to foist Gemini pane on Chrome users Yes, you can build an AI agent – here's how, using LangFlow Clawdbot becomes Moltbot, but can’t shed security concerns Gartner questions if Salesforce AI will stay all-you-can-eat Cursor is better at marketing than coding Salesforce willing to lose money on AI to lock in customers Agents of misfortune: The world isn't ready for AI agents MCP vs A2A: Agentic AI protocols take shape
Claude supports MCP Apps, presents UI within chat window
Thomas Claburn Thomas Claburn · 2026-01-27 · via The Register - Special Features: Agentic AI

Agentic AI

Claude can now disgorge interface elements from other apps

An official Model Context Protocol extension

Anthropic's Claude can now present the interfaces of other applications within its chat window, thanks to an extension of the Model Context Protocol (MCP).

Claude has long been able to fetch data from third-party applications through an MCP server connection. That capability has been expanded to present user interface elements like charts, forms, and dashboards, allowing third-party apps to be operated from within the chat window. 

"Claude already connects to your tools and takes actions on your behalf," the company said in a blog post. "Now those tools show up right in the conversation, so you can see what's happening and collaborate in real time."

The change makes Claude's chat environment more like a cross-application interface layer – users no longer have to switch application focus to access app-specific tools. It could pose a challenge to operating system makers like Apple, Google, and Microsoft, similar to the one presented by web browsers – it reduces the need to interact with the operating system.

And it's not just Claude that stands to benefit. The extension, called MCP Apps, should be available in other vendors' AI applications, including Goose, Visual Studio Code, and ChatGPT, either today or soon.

The MCP Apps Extension (SEP-1865) was first proposed back in November 2025 and is based on MCP-UI and the OpenAI Apps SDK. It allows MCP servers to deliver interactive user interface elements that hosts can render in-conversation, rather than returning data alone.

"MCP Apps address a real gap between what agentic tools can provide and how users naturally want to interact with them," said Clare Liguori, senior principal engineer at AWS, in remarks accompanying the MCP blog post. "The ability to render dynamic interfaces directly in conversation makes it easier to leverage MCP server capabilities in practical ways."

Initially, this ability to be proxied within Claude is limited to Anthropic's launch partners: Amplitude, Asana, Box, Canva, Clay, Figma, Hex, monday.com, Slack, and (soon) Salesforce. But expect that to expand over time as other software makers adapt their apps.

MCP Apps surface third-party interface elements in iframes, but with additional capabilities like logging events for debugging, opening links in the user's browser, sending follow-up messages, and updating the underlying model's context.

Image of Figma in Claude via MCP Apps extension

Image of Figma in Claude via MCP Apps extension
MCP Apps extension

"Running UI from MCP servers means running code you didn't write within your MCP host," the MCP post explains, citing various security layers like iframe sandboxing, pre-declared templates for prevailing HTML content prior to rendering, auditable messages, and host-managed approvals for UI-initiated tool calls.

Whether those defenses prove sufficient to avoid creating novel risks will be tested in time. ®