Malte Ubl
@industrialempathy.com
3.6K followers 130 following 120 posts
CTO at Vercel @cramforce on Twitter industrialempathy.com
Posts Media Videos Starter Packs
industrialempathy.com
To honor a great friend and open-source pioneer Mikeal Rogers we're organizing a "conf" and charity auction.

I'll be auctioning an exclusive wagyu BBQ at my house for up to 15.

Join us and ideally offer more donations!

All proceeds go to his wife and 2 kids an-event-mikeal-would-have-liked.com
An Event Mikeal Would Have Liked
Memorial charity event celebrating Mikeal Rogers' life - November 12, 2025
an-event-mikeal-would-have-liked.com
Reposted by Malte Ubl
industrialempathy.com
Prompt injection is sometimes called an "unsolvable". But we shouldn't give up like that. I've been on a mission to introduce hard security boundaries into AI agents and this is the next step:

What if compromised MCP tools couldn't just passively prompt inject your app?
vercel.com
Agents that load dynamic MCP tools risk security and quality issues:

• Prompt injection
• Unreliable tool calls
• Unexpected changes
• Wasted tokens

𝚖𝚌𝚙-𝚝𝚘-𝚊𝚒-𝚜𝚍𝚔 generates static tools you control so they stay stable and predictable.
vercel.com/blog/genera...
Generate static AI SDK tools from MCP servers with mcp-to-ai-sdk - Vercel
Use mcp-to-ai-sdk to generate MCP tools directly into your project. Gain security, reliability, and prompt-tuned control while avoiding dynamic MCP risks.
vercel.com
Reposted by Malte Ubl
vercel.com
Vercel @vercel.com · Jul 17
Search 1M+ GitHub repositories from your AI agent using Grep's MCP server.

Your agent can now reference coding patterns and solutions used in open source projects to solve problems and answer questions.

vercel.com/blog/grep-a...
Grep a million GitHub repositories via MCP - Vercel
Search 1M+ GitHub repositories from your AI agent using Grep's MCP server. Your agent can now reference coding patterns and solutions used in open source projects to solve problems.
vercel.com
Reposted by Malte Ubl
vercel.com
Vercel @vercel.com · Jul 8
At Vercel Ship 2025, Malte Ubl shared a no-nonsense approach to building AI agents.

Learn how to build and secure AI agents that automate complex workflows, and understand the product and business impact behind them.

vercel.fyi/J9sgXzv
Vercel Ship 2025: The no-nonsense approach to AI agent development with Malte Ubl
Learn how to build secure, production-grade AI agents.
vercel.fyi
industrialempathy.com
So excited so be working with y'all more closely!
Reposted by Malte Ubl
danielroe.dev
I am delighted to announce that @vercel.com are investing in Nuxt!

they are backing our vision of the open web, hiring me as well as other core team members (@atinux.com, @pi0.io + @antfu.me), to continue to work full time on Nuxt

we remain independent — and our vision and ethos are not changing 💚
Reposted by Malte Ubl
vercel.com
Vercel @vercel.com · Jul 8
NuxtLabs, creators of Nuxt and Nitro, are joining Vercel.

Same license, roadmap, and open governance, but now in a joint mission to build the best web.
industrialempathy.com
I'm traveling to Berlin next week and we're doing a Vercel meetup to celebrate the opening of our new Berlin office.

I have a whole queue of blog posts about agents coming out and will be turning them into a lightning talk, and we'll have a panel, etc. The usual!

partiful.com/e/9Is88RwZV9...
RSVP to Vercel Berlin Meetup | Partiful
Berlin! 🇩🇪 Vercel is coming to Berlin to host its June meetup. Join us for community talks, a Vercel q&a panel, and networking. Bring all your Vercel & Next.js questions. And yes, come hungry! We'l...
partiful.com
Reposted by Malte Ubl
vercel.com
Vercel @vercel.com · May 7
MCP allows you to build integrations for AI models.

Deploy your Model Context Protocol (MCP) server on Vercel and connect to it from clients like Claude, Cursor, and more.

Learn more and get started with our updated template.

vercel.com/changelog/mc...
Code snippet: // app/api/[transport]/route.ts

import { createMcpHandler } from '@vercel/mcp-adapter';

const handler = createMcpHandler(server => {
  server.tool(
    'roll_dice',
    'Rolls an N-sided die',
    { sides: z.number().int().min(2) },
    async ({ sides }) => {
      const value = 1 + Math.floor(Math.random() * sides);
      return { content: [{ type: 'text', text: `🎲 You rolled a ${value}!` }] };
    }
  );
});

export { handler as GET, handler as POST, handler as DELETE };
industrialempathy.com
Can't wait to spend the summer at the pool
industrialempathy.com
It's on the roadmap. Should be about 3 months out.
industrialempathy.com
We looked deeply into the recent React Router/Remix CVE & deployed mitigation for Vercel customers through our firewall
- It enables stored XSS
- High likelihood that any React Router app is impacted
- If using another CDN action may be required
- Upgrade recommended
vercel.com/changelog/pr...
Protection against React Router and Remix vulnerabilities - Vercel
Security researchers reviewing the Remix web framework have discovered two high-severity vulnerabilities in React Router. Vercel proactively deployed mitigation to the Vercel Firewall and Vercel custo...
vercel.com
Reposted by Malte Ubl
nextjs.org
Next.js @nextjs.org · Feb 27
Next.js 15.2

• Redesigned Error UI & Improved Stack Traces
• Streaming Metadata
• Turbopack Performance Improvements
• View Transitions (experimental)
• Node.js Middleware (experimental)

nextjs.org/blog/next-15-2
Next.js 15.2
Next.js 15.2 introduces an improved error experience, streaming metadata, Turbopack performance improvements, and more.
nextjs.org
Reposted by Malte Ubl
bueno.codes
bueno @bueno.codes · Jan 28
Just tested @vercel.com v0 for the first time at work and it's been amazing. Even our CTO was thrilled seeing his concepts materialize in real-time!
industrialempathy.com
Yeah, I mean, the Oppenheimer movie is showing some of that. AFAIK it was very Physics-specific that non-Germans would literally learn German to enter the field. I haven't heard about that happening in different disciplines
industrialempathy.com
And with the benefit of hindsight, the thesis proposes a blockchain-like mechanism for p2p transaction processing. It might have been a little ahead of its time. But again, it might as well not exist given that it was a computer science thesis written in German 🤦
A PKI based on decentralized trust for P2P transaction processing [2004]
The text below is Malte Ubl's diploma thesis from 2004. Diploma was the name of the primary academic title
industrialempathy.com
industrialempathy.com
I finished university in 2004 and made a big stupid mistake: I wrote my thesis in German. I've literally been sad about this ever since.

But AI to rescue: I dusted off an old PDF and had Gemini Pro translate it to English
A PKI based on decentralized trust for P2P transaction processing [2004]
The text below is Malte Ubl's diploma thesis from 2004. Diploma was the name of the primary academic title
industrialempathy.com
industrialempathy.com
Does anyone know the status of the Private State Token API?
It seems shipped in Chrome but the demos appear broken and it doesn't look like Google shipped a generic issuer like Apple did for Private Access Tokens.
industrialempathy.com
I just remembered how an internet mob chastised the Google intern who wanted to ship an async version of Local Storage using tech that allowed shipping Chrome feature using only JS knowledge. Both the feature and the underlying tech was killed.

Imagine what could have been.