Pipeline Active
Last: 15:00 UTC|Next: 21:00 UTC
← Back to Insights

The Agent Stack Is Crystallizing: MCP, OpenClaw, Superpowers, and the Security Gap

Three distinct layers of agent infrastructure have emerged: MCP (5,800+ servers, 97M SDK downloads), OpenClaw (250K+ stars), and superpowers (99K stars). But a critical security layer is missing, with Claude Code exposing CVSS 8.7 vulnerabilities across 18K TB/year of enterprise data flows.

TL;DRBreakthrough 🟢
  • Agent infrastructure has crystallized into three layers: protocol (MCP), consumer orchestration (OpenClaw), and developer methodology (superpowers)
  • MCP has achieved production status with 5,800+ servers, 97M monthly SDK downloads, and governance transferred to the Linux Foundation-backed AAIF
  • OpenAI's simultaneous Assistants API deprecation and OpenClaw acquisition reveals coordinated shift from cloud API to protocol-based + local-first architecture
  • Security is the critical missing fourth layer: Claude Code CVSS 8.7 vulnerabilities deploying at enterprise scale while 18K TB/year of data flows through agent infrastructure
  • Practical impact: implement MCP for integrations, use superpowers for methodology discipline, and treat security as first-class infrastructure requirement
agentsMCPOpenClawsuperpowersinfrastructure4 min readMar 22, 2026
High ImpactShort-termAdopt MCP for integrations, superpowers for methodology discipline, and security as first-class infrastructure. Audit MCP server configs, never init in untrusted repos, implement semi-formal verification for agent code.Adoption: MCP is production-ready now. OpenClaw/NemoClaw early deployment. Superpowers stable but contributor-limited. Security tooling 6-12 months from enterprise-grade. Full stack maturity Q1 2027.

Cross-Domain Connections

MCP reaches 5,800+ servers, OpenAI deprecates Assistants APIOpenClaw reaches 250K+ stars, OpenAI acqui-hires creator

Coordinated strategy: abandon cloud API in favor of protocol (MCP) + local-first (OpenClaw) agent architecture. The cloud API monoculture is over.

Claude Code CVSS 8.7 shell execution via repo config filesMCP ecosystem with 5,800+ servers and 18K TB/yr enterprise data

Standardization that makes agent infrastructure powerful also makes it a single point of failure. Compromised MCP server can execute arbitrary commands across every connected agent.

obra/superpowers: 99K stars, 7-phase methodologyMeta semi-formal reasoning: structured prompts improve code verification to 93%

Methodology layer + verification layer are convergent approaches. Combined, they could form the QA layer for agent-generated code.

Key Takeaways

  • Agent infrastructure has crystallized into three layers: protocol (MCP), consumer orchestration (OpenClaw), and developer methodology (superpowers)
  • MCP has achieved production status with 5,800+ servers, 97M monthly SDK downloads, and governance transferred to the Linux Foundation-backed AAIF
  • OpenAI's simultaneous Assistants API deprecation and OpenClaw acquisition reveals coordinated shift from cloud API to protocol-based + local-first architecture
  • Security is the critical missing fourth layer: Claude Code CVSS 8.7 vulnerabilities deploying at enterprise scale while 18K TB/year of data flows through agent infrastructure
  • Practical impact: implement MCP for integrations, use superpowers for methodology discipline, and treat security as first-class infrastructure requirement

The Three-Layer Agent Stack

The agent ecosystem in March 2026 has reached infrastructure crystallization -- the moment competing approaches resolve into a layered stack. Three distinct layers are now identifiable, each with a clear winner.

Layer 1: Protocol (MCP)

Anthropic's Model Context Protocol has achieved what Language Server Protocol achieved for IDEs: reducing the N*M integration problem to N+M. With 5,800+ production-grade servers, 97M monthly SDK downloads, and governance donated to the Linux Foundation-backed Agentic AI Foundation (co-founded with Block and OpenAI), MCP is no longer a bet -- it is infrastructure.

OpenAI's decision to deprecate its own Assistants API (sunset mid-2026) in favor of MCP-compatible architectures is the definitive signal. Block built 60+ internal MCP servers powering their Goose agent with 50-75% time savings. Bloomberg cut AI integration time-to-production from days to minutes. Gartner projects 40% of enterprise apps will include task-specific agents by end 2026, up from <5%.

Layer 2: Consumer Orchestration (OpenClaw/OpenAI)

OpenClaw's trajectory -- 210K stars in 8 weeks, 1.5M agents created, acquired by OpenAI, subsequently surpassing React's 243K stars -- establishes the consumer agent layer. This is the WhatsApp/Slack/Teams/Gmail connector that turns any messaging surface into an AI agent interface.

OpenAI's acqui-hire of creator Peter Steinberger, combined with deprecating Assistants API, signals a deliberate pivot from hosted API to personal/local agent platforms. NVIDIA's NemoClaw enterprise fork (announced at GTC 2026) validates the architectural approach for enterprise deployment. The Mac Mini stock shortage (6-week delivery waits for high-memory configs) is the strongest adoption signal: hardware demand driven by software adoption.

Layer 3: Developer Methodology (superpowers)

obra/superpowers fills a different niche: not what agents connect to (MCP) or how end-users interact with agents (OpenClaw), but how developers build with AI coding agents. Its 7-phase workflow (Socratic brainstorming, design validation, planning, TDD, parallel sub-agents, code review) enforces disciplined methodology -- teaching AI agents the practices senior engineers follow.

99,200+ stars in 3 months, official Anthropic marketplace inclusion, and Shell-based architecture position it as the Claude Code enhancement layer.

Emerging Agent Infrastructure Stack: Three Layers + Security Gap

The agent stack crystallizing into protocol, orchestration, and methodology layers with security as the critical gap.

LayerLeaderMetricAdoptionMaturity
ProtocolMCP (Anthropic/AAIF)5,800+ servers97M SDK downloads/moProduction
Consumer OrchestrationOpenClaw (OpenAI)250K+ stars1.5M agents createdGrowth
Dev Methodologysuperpowers (obra)99.2K starsAnthropic marketplaceGrowth
SecurityNone (gap)CVSS 8.7 unpatched18K TB/yr exposedMissing

Source: Compiled from MCP roadmap, GitHub, Check Point Research

GitHub Star Velocity: The Clearness of Winners

The star counts reveal velocity and adoption clarity. OpenClaw reached 250K stars by establishing the dominant consumer UI pattern. Superpowers reached 99.2K stars in 3 months by establishing the dominant developer methodology. LangChain, CrewAI, and AutoGen -- frameworks from the earlier generation -- are static or declining.

This is not market saturation. This is architectural clarity: the stack has resolved, and each layer has an obvious winner or leader.

Agent Framework GitHub Stars (March 2026)

Star counts showing OpenClaw and superpowers rapidly surpassing established frameworks like LangChain and CrewAI.

Source: GitHub / multiple tracking sources

The Critical Missing Layer: Security

Claude Code's enterprise deployment exposed that configuration files are now execution logic. CVE-2025-59536 (CVSS 8.7) enables arbitrary shell command execution when Claude Code initializes in untrusted repositories. CVE-2026-21852 allows API key exfiltration before trust prompts appear. Langflow (a popular Claude Code integration) had CVE-2026-33017 (CVSS 9.3, RCE) with active exploitation within 20 hours of disclosure.

Enterprise AI data transfer has reached 18,033 TB/year (93% YoY increase), and this entire data flow passes through agent infrastructure with immature security models. This is the same pattern that plagued npm/pip/Docker ecosystems, now amplified by AI agents that execute with higher privileges and less human oversight.

The semi-formal reasoning approach from Meta's arXiv paper offers a partial solution: structured reasoning templates that improve patch verification to 93% accuracy could be applied to agent configuration validation. But the fundamental design tension persists: agent infrastructure must execute arbitrary configurations to be useful, and executing arbitrary configurations creates supply chain attack vectors.

The Fragmentation Risk: Bus Factor and Vendor Consolidation

The contrarian view: this stack may not stabilize. MCP governance under the Linux Foundation is untested for a protocol this young. OpenClaw's creator was acqui-hired by OpenAI, meaning the open-source community depends on a single company's goodwill. Superpowers has 24 contributors for a 99K-star project -- a bus-factor risk for enterprise infrastructure.

The agent stack may fragment along the same lines as the broader AI market: OpenAI ecosystem, Anthropic ecosystem, and open-source ecosystem each developing incompatible agent infrastructure. This would recreate the npm/pip fragmentation pattern that plagued Python and Node.js ecosystems for years.

What This Means for Practitioners

ML engineers building agent systems have a clear path forward but must prioritize security:

For integration: Adopt MCP as your integration protocol -- it has won the protocol war. The 5,800-server ecosystem is large enough to support any legitimate integration requirement, and the governance transfer to AAIF signals long-term stability.

For development workflow: Implement superpowers for coding agent methodology discipline. The 7-phase workflow (Socratic brainstorming, design validation, planning, TDD, parallel sub-agents, code review) provides the structure that prevents agent-generated code from becoming a maintenance nightmare.

For security (critical): Treat security as a first-class infrastructure requirement, not an afterthought. Audit all MCP server configurations before production deployment. Never initialize agent tools in untrusted repositories. Implement the semi-formal verification approach for agent-generated code changes -- this is not optional.

For deployment: Design with abstraction layers that do not lock you into a single ecosystem. If OpenAI dominates consumer interfaces while Anthropic dominates the protocol layer, you need both -- via MCP's standardization layer that makes switching costs negligible.

Share