Oct 4, 2026 / Engineering NetSuite 2026.2 brings Ask Oracle, a conversational assistant for natural language questions over your ERP data, and AI Canvas, a workspace for organizing the scorecards and charts that come out of that conversation. Both ship native, inside the NetSuite Next experience, available now in the United States and Canada. That is real progress on the question teams have been building custom NetSuite integrations to answer for years. It is also not the same question as whether to build a custom Model Context Protocol tool against your own schema, which remains the highest leverage move for anything Ask Oracle was never designed to touch.
Sep 28, 2026 / Engineering Adobe shipped its September 2026 Commerce Storefront release with six changes worth a headless or B2B team's attention: Free Gift Selection, an expanded Payment Services drop in with Google Pay and PayPal Buttons, Multiple Named Wishlists, a shared B2B Company Address Book with role based permissions, accessibility improvements across cart and account, and a reCAPTCHA fix for B2B company registration. Five of these are low risk component updates. The sixth ships with an action item, passing an explicit configuration flag, that will break company registration on B2B enabled backends if a team skips it. This post walks through what shipped, the versions behind it, and a verification checklist to run before this release reaches production.
Sep 28, 2026 / Engineering If your team's Claude Code usage suddenly feels tighter this month, the numbers explain why. A temporary 50 percent weekly limit boost expired on August 31, 2026, and the permanent replacement that took effect September 14 is a 25 percent increase, not a 50 percent one. Anthropic said so directly in its own announcement: compared to the boosted summer level, this works out to a 17 percent reduction in weekly limits on Claude Code. That is an unusually plain admission from a vendor, and it is worth taking at face value rather than decoding it as marketing language. This post lays out the full timeline from May through September, why the separate 5 hour session change does not offset the weekly cut, and three concrete steps for budgeting a team's Claude Code usage against the new permanent ceiling.
Sep 27, 2026 / Engineering On September 21, 2026, Shopify enabled Shop Pay based agent checkout by default for all eligible US merchants, bypassing the merchant by merchant opt in cycle that most platform rollouts still use. The same week, Meta completed a commerce stack that lets its Muse agent move from product discovery to a completed purchase through Stripe's Link wallet, with a single use virtual card generated for merchants who do not directly accept Link. Two separate announcements, but the same underlying shift: agent initiated checkout just became the default path for a meaningful share of Shopify Plus traffic, whether or not a merchant explicitly opted in.
Sep 22, 2026 / Engineering Salesforce introduced seven named Agentforce agents on September 11, 2026, one per business function, with Carter built specifically for shopper facing commerce work. Six of the seven are generally available now; Hunter, the seventh, stays in pilot as the first agent running on a long horizon runtime built to pursue goals over weeks rather than a single session. The timing, ahead of peak holiday season, is deliberate. Here is what enterprise commerce teams actually need in place before Carter can do what Salesforce is claiming it can do.
Sep 21, 2026 / Engineering The primary reader of your product catalog is increasingly a machine, not a shopper. Research shows 71 percent of pages cited by ChatGPT and 65 percent of pages cited by Google AI Mode include structured data, and Google AI Overviews already appear on 14 percent of shopping queries. Two open protocols, the Universal Commerce Protocol from Google and Shopify and the Agentic Commerce Protocol from Stripe and OpenAI, now formalize how an agent discovers and transacts against your catalog. Both depend on the same underlying asset: complete, consistent, structured product data. This is a practical guide to what that data has to look like and where most catalogs fall short.
Sep 20, 2026 / Engineering Prompt injection stopped being a chatbot curiosity a while ago, but two vulnerability disclosures make the current stakes concrete. CVE-2026-22708, a critical severity flaw in Cursor's Auto Run allowlist, let an attacker use trusted shell built ins to bypass command approval entirely. Two critical Semantic Kernel CVEs, 2026-25592 and 2026-26030, showed the same underlying pattern, a single crafted prompt reaching a privileged execution path, in Microsoft's own agent framework. Coding agents are now the largest single category tracked in agentic security research, and both bugs point at the same root cause: an agent trusting output from its own tools more than it should. Here is the actual mechanism and what to check in your own setup.
Sep 20, 2026 / Engineering The Model Context Protocol maintainers finalized the 2026-07-28 specification on that date, described as the most substantial revision to the protocol since authorization was first added. A stateless protocol core, multi round trip requests, header based routing, and cacheable tool list results are the headline architecture changes, and Dynamic Client Registration is now formally deprecated in favor of Client ID Metadata Documents, though it keeps working for backward compatibility. For a team building or maintaining MCP servers, several of these changes are not cosmetic; they change how a server can be deployed and how its clients should authenticate. Here is what moved and what an existing integration needs to check.
Sep 19, 2026 / Engineering Oracle NetSuite announced upgrades to its AI Connector Service at SuiteConnect London on March 31, 2026, adding support for Model Context Protocol apps and expanding coverage into NetSuite Analytics Warehouse. The practical result is a protocol driven way to point Claude, or any MCP compatible client, at a customer's NetSuite instance without hand rolling a REST integration for every project. For an agency that builds NetSuite and QuickBooks integrations for a living, this changes the starting point of the work, not the need for judgment about what an AI client should actually be allowed to touch. Here is what the AI Connector Service and its MCP Standard Tools SuiteApp expose, and where the access boundary needs to sit.
Sep 16, 2026 / Engineering For a decade the discovery question for an ecommerce brand was how to rank on Google. In 2026 there is a second surface that behaves nothing like search: AI shopping assistants like ChatGPT and Perplexity that answer a buyer's question with specific products and links, without the buyer ever visiting a results page. Shopify's answer is Shopify Catalog, the channel that exposes your products to those assistants, and since the Winter 26 edition it explicitly covers headless Hydrogen storefronts running on Oxygen, which were previously invisible to this kind of tool. That last part matters, because going headless historically meant giving up the built in surfaces a themed Shopify store got for free. This post is a practical read on how the Catalog channel works, what your product data has to look like to win in it, and how to think about AI shopping as a discovery channel rather than a mystery.
Sep 15, 2026 / Engineering Shopify rebuilt Hydrogen in 2026 so it runs on any React stack, including Next.js, and split it into two products that answer different questions. The Hydrogen Framework is the opinionated path: built in routing, commerce hooks, and a project structure that assumes you are starting fresh. Hydrogen Core is the lower level path: a set of components and utilities you drop into an existing React or Next.js app when you already have infrastructure you are not going to throw away. Picking wrong means either fighting an opinionated framework you did not want or rebuilding conveniences Core leaves out. This post is the decision framework, plus what the v2026.4 browser proxy change means for both.
Sep 15, 2026 / Engineering Shopify's Storefront MCP is how you wire an AI agent into a headless store: a server that exposes catalog search, cart state, and product data as tools an agent can call. The catch, as of September 2026, is that the original Storefront MCP cart tools are deprecated in favor of a new set under the Universal Commerce Protocol, the Cart MCP and Checkout MCP servers, and if you built on the old get_cart and update_cart calls you are now on a migration path. This post walks the current architecture for an in store agent that reads the catalog, builds and iterates a cart, and hands the buyer off to checkout, and is honest about what just changed and why.