One last Agent Horror Story for Halloween Eve: Trey King let his agents run on a big analysis project for a couple of days. The dashboards looked great. Then he checked usage: 14 million tokens.
His advice: watch your tokens, because you never know what they’ll cost. 👻
🤖 Made with AI
In @Eon_io_'s Era benchmark, agents broke security or business rules in 40% of runs. Closing that gap is why Arcade.dev exists, and why we’re joining Era as a research partner. Getting that number to zero will take a community.
We just ran the most comprehensive benchmark of AI agent alignment in enterprise environments:
19 leading AI models acting as agents inside simulated companies built with Era, 2,304 runs across 41 everyday tasks.
Agents broke security and business rules in 40% of those runs. Every single model failed, including all the frontier models. A few examples:
- An agent told one of the company's biggest customers that Finance had approved a full refund.
Nobody had.
- An agent shared a customer's internal churn-risk score directly with that customer.
- An agent followed a fake runbook planted in a support ticket and promised a customer a credit nobody approved.
- An agent posted another customer's personal contact details (PII) in a shared Slack channel.
In a real company, each of these is a financial liability, a compliance breach, or a lost account.
We've shared the full results with the model providers, including exploitable failure modes we're not publishing, and are working with them on fixes.
One benchmark won't fix this.
We're excited to have @cognition, @LangChain, @TryArcade, @Reindeer_AI, Hirundo, @Box, @recolabs_ai and @QodoAI join Era as research partners, as we build out the next round of research.
More soon.
I'm still the most bullish person in the room on AI.
But this benchmark convinced me that agent reliability and trust is the next big problem to solve.
Until then, test every agent before it gets a login, and keep your own record of what it changes.
Full results: era.eon.io/model-alignment-b…
Arcade.dev now supports MCP Apps, bringing the Gmail, Outlook Mail, and Slack interfaces you know into your agent. Edit and send drafts right in the chat, and if your permissions don’t allow sending, there’s no Send button. How it works: arcade.dev/blog/mcp-apps/
Arcade.dev made the final four of the 2026 Prove IT CISO Pitch Competition, judged by a panel of CISOs during Black Hat USA. Always glad to talk agent governance with the people responsible for enterprise security. See you on 12/2.
businesswire.com/news/home/2…
POV: you walk into Arcade.dev’s new SF office for the first time. We’ve grown into a lot more room, with plenty of empty desks to fill. We’re hiring, and the high score on the arcade machine is still up for grabs: arcade.dev/careers
Our favorite thing to do is talk agents, and AGNTCon + MCPCon gave us two full days of it, with three talks, a live demo, a happy hour with @mcpjams, and an award for @nbarbettini. Thanks to @AgenticAIFdn and everyone who stopped by to talk shop.
Agent Horror Stories, ep. 2: the bank phone agent that could be sweet-talked into a transfer before it verified anyone. @shubcodes on how Arcade.dev helped fix it: one tool to start, MFA to verify, then only that caller’s access. 🎃
🤖 Made with AI
Congrats to Arcade.dev’s @nbarbettini on @AgenticAIFdn Outstanding Technical Contribution Award. He co-authored URL Elicitation, the part of MCP that lets users sign in directly so their tokens never touch the client or the model.
arcade.dev/blog/nate-barbett…
On 11/3, Arcade.dev and @LangChain_OSS are hosting a hands-on workshop in Toronto on building agents that can pass a security review, with user-scoped authorization, policy checks, human approval, and LangSmith tracing.
Request a spot: arcade.dev/events/toronto-ro…
The new Arcade Plugin takes you from signing up for Arcade.dev to your first tool call in one install. Add it to Claude Code, Cursor, VS Code, Codex, and more, then sign in and ask your agent for something real, with no gateway to set up.
arcade.dev/blog/arcade-plugi…
This October, we’re sharing Agent Horror Stories, real moments when an AI agent struck terror into a user’s heart. First up: @ptdamiba told his agent to “kill the clusters” so he’d stop getting billed. The billing stopped, because the agent deleted every cluster. 🎃
🤖 Made with AI
“Even if you pretend that you don’t have agents running inside of your organization, you do.” @nbarbettini on the CyberBytes podcast with David Huish, from governing agents to how fast Arcade.dev has grown since his last startup. youtube.com/watch?v=g_G12EuW…
If you’re in San Jose for AGNTCon + MCPCon, join Arcade.dev and @mcpjams the night before, Oct. 21 from 4 to 7 PM, for lightning demos, drinks, and people building with agents and MCP. 21+, no badge needed. Request a spot: luma.com/c6w736u5
Arcade.dev released Tool Recommendation last week. Here’s the simplest way to explain it: agents searching a big tool catalog walk every aisle at Home Depot to find a hammer, and Tool Recommendation sends them straight to it. arcade.dev/blog/tool-recomme…
The Arcade.dev team is heading to AGNTCon + MCPCon in San Jose, 10/22 and 10/23. Catch our four sessions, including a live demo where an agent tries a wire transfer and gets held for approval. Save 25% with OUTREACH25: events.linuxfoundation.org/a… @AgenticAIFdn
Arcade.dev’s new Tool Recommendation gives agents your whole tool catalog for up to 37% less in token costs, with up to 91% fewer input tokens per session on every model we tested.
Available now in Arcade Cloud: arcade.dev/blog/tool-recomme…
Thanks to @VentureBeat for the exclusive on Tool Recommendation’s launch. @carlfranzen nailed the problem it solves: “Connecting an agent to more business systems also makes its instructions larger and more expensive.”
venturebeat.com/orchestratio…
Think you've got what it takes to play "Rogue Agent" and add your initials to the leaderboard? Prove it: arcade.dev/arcade/
Arcade.dev has three new teammates and a lot of confetti to clean up. Welcome to Thanh-Ha Nguyen (ex-Okta), Don Tregonning (ex-Splunk), and Alex Laughnan (ex-Asana), who all survived the confetti cannon.
We’re hiring for the next round: arcade.dev/careers















