# Cloudflare Ships GitHub for Agents, Hardware Startups Shouldn’t Ship Apps, Matt's Three-Week MCP World Tour, Bad Boy Browser, Inbound Prompt Injection

Page: https://stenobird.com/podcast/you-ve-been-a-bad-agent-7334728/cloudflare-ships-github-for-agents-hardware-startups-shouldn-t-ship-apps-matt-s-three-week-mcp-world-tour-bad-boy-browser-inbound-prompt-injection
Text version: https://stenobird.com/podcast/you-ve-been-a-bad-agent-7334728/cloudflare-ships-github-for-agents-hardware-startups-shouldn-t-ship-apps-matt-s-three-week-mcp-world-tour-bad-boy-browser-inbound-prompt-injection.md
Podcast: [You've Been a Bad Agent](https://stenobird.com/podcast/you-ve-been-a-bad-agent-7334728)
Published: 2026-04-17T19:58:51+00:00
Episode link: https://share.transistor.fm/s/196c02ed
Audio file: https://media.transistor.fm/196c02ed/e379b7fb.mp3
Processing state: processed
JSON: https://stenobird.com/v1/public/podcasts/you-ve-been-a-bad-agent-7334728/episodes/cloudflare-ships-github-for-agents-hardware-startups-shouldn-t-ship-apps-matt-s-three-week-mcp-world-tour-bad-boy-browser-inbound-prompt-injection
Duration seconds: 4753

## Resource

The shift from traditional software to agentic workflows is fundamentally changing the internet's architecture. We explore why hardware startups should focus on MCP servers instead of apps and how Cloudflare's new 'Artifacts' provides a Git API for an agent-driven world.

## Highlights
- Main idea: The transition to agents represents a new compute unit and a new internet, not just an incremental update
- Practical takeaway: Hardware startups should prioritize shipping MCP servers over traditional apps to integrate with the agent ecosystem
- Failure mode: Relying on traditional UI/UX patterns like Slack's DSL can be backward-facing in a world of generative, on-demand interfaces
- Technical insight: Cloudflare's Artifacts introduces a Git API designed for organizations managing billions of repositories for autonomous agents
- Security risk: The rise of inbound agents necessitates new approaches to prompt injection mitigation and automated moderation

## Topics

Model Context Protocol, Cloudflare Artifacts, Agentic Workflows, Prompt Injection, Anthropic Opus, AI Engineering, Software Architecture, Git API

## Chapters
- 1:00 — The Agentic Shift: Reflecting on the rapid pace of change in LLM capabilities and the reality of the 'everything is changing' era.
- 19:00 — Prompt Injection & Moderation: Discussing the risks of inbound prompt injection and the potential for local LLMs to act as security checkpoints.
- 25:00 — The New Computing Paradigm: Exploring the concept of sharing executable code and API shapes as the new standard for internet interaction.
- 37:00 — The Death of Static UI: Why fixed DSLs and traditional UI components are becoming obsolete in favor of on-demand, generated interfaces.
- 1:01:00 — Hardware & MCP Strategy: Why hardware companies should build for the Model Context Protocol (MCP) rather than building standalone apps.
- 1:07:00 — Cloudflare Agents Week: A deep dive into Cloudflare's recent releases, including new feature flags and agent-centric infrastructure.
- 1:13:00 — MCP vs. CLI: Analyzing the technical distinction between stateless MCP and the stateful nature of traditional CLIs.

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/you-ve-been-a-bad-agent-7334728/episodes/cloudflare-ships-github-for-agents-hardware-startups-shouldn-t-ship-apps-matt-s-three-week-mcp-world-tour-bad-boy-browser-inbound-prompt-injection/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/you-ve-been-a-bad-agent-7334728/cloudflare-ships-github-for-agents-hardware-startups-shouldn-t-ship-apps-matt-s-three-week-mcp-world-tour-bad-boy-browser-inbound-prompt-injection.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.