On 25 September 2026 n8n introduced Agents: you describe a task and give the agent a model plus the tools and workflows it may use, and it works out the steps itself.
What it means for your work
Teams already running n8n can try open-ended agents while keeping hard limits by exposing only vetted workflows as tools.
Our read on the items that move something. The reporting is everyone's; this part is ours.
1
When agents arrive through declared tools rather than the page, what your site exposes - and what it refuses - becomes a product decision rather than a search one.OpenAI wires WebMCP into ChatGPT’s browser - a site can hand an agent tools instead of a layoutThe AI-Assisted Software Development beat · OpenAI
2
If you publish, grade or resell model-written text, the provenance mark is now a property of the model rather than an option you switch on — and detection of it becomes a fact of your workflow, not a policy choice.Anthropic will watermark text its models generate, at the model levelThe Content & Marketing Strategy beat · TechCrunch
3
This is the protocol doing the thing it was designed for at consumer scale — the app-selection step disappears, which is exactly the surface a competing creative tool now has to win at.Adobe puts 70+ tools behind one ChatGPT plugin and lets the protocol pick the appThe Content & Marketing Strategy beat · Adobe
Following opens with early access — sign up for early access to register your interest; it does not switch following on today. Everything you follow will land on one page, in your account menu.
All coverage
Everything Intel has read, newest first. Each title opens at its original publisher.
Anyone who has tried to classify against a taxonomy larger than the context window has hit this wall, and the trick turns the model’s tendency to invent into the useful half of the pipeline. It is an idea rather than a benchmark, so measure it on your own labels before shipping it.
Every document your assistant reads is now potentially a carrier, and it spreads through ordinary drafting - the file-sharing habits of a normal team are the attack surface.
Unpatched WordPress sites are exploitable by anonymous attackers right now, and self-hosted Langflow has hit the exploited list twice in two weeks — treat exposed instances as patch-or-isolate today, not dev tools you can forget.