Safari MCP server opens browser to AI agents

Apple quietly shipped a Safari MCP server, letting AI agents peek at real browser rendering. It's the most concrete bridge yet between LLMs and live web development. Elsewhere, Manticore's 14x embedding speedup and a ChatGPT file download vulnerability show the day's other poles: performance and security.

Sources

AI meets the browser

The day's most practical news for web developers: Apple shipped a Safari MCP server that lets AI agents see how code actually renders.

#01webkit.orgJul 3

Introducing the Safari MCP server for web developers

Apple's Safari MCP server in Technology Preview 247 lets any MCP-compatible AI agent connect to a live Safari window and see how code renders. It's a concrete step toward AI-assisted debugging that actually sees the page.

by coloneltcb8 min readRead original

Performance and security

Two very different kinds of engineering wins, one speeds up embedding inference by an order of magnitude, the other exposes a vulnerability chain in ChatGPT's file download flow.

#02manticoresearch.comJul 3

14× faster embeddings: how we rebuilt the ONNX path in Manticore

Manticore rebuilt its ONNX inference path to hit 14x faster embeddings, swapping a CPU-bound Candle backend for ONNX Runtime. For anyone running vector search at scale, this is a real throughput upgrade.

#03undercodetesting.comJul 3

ChatGPT File Download Flow Vulnerability: Guardrail Bypass To LFI — Technical Deep Dive & Mitigation +

Researcher zer0dac found a chain combining LLM guardrail bypass with a path traversal in ChatGPT's file download endpoint, allowing retrieval of sandbox files like /etc/passwd. The writeup covers both the social engineering and the classic traversal.