🛠️ All DevTools

[Other] Create an IPhone/Android app without coding Mobilable.dev transforms your app idea into a native iOS/Android app in minutes using AI. No coding needed, generate React Native code, UI, backend, and deploy to app stores instantly. Build and launch your app effortlessly at mobilable.dev!

[Other] Show HN: MCP Security Suite Hi HN!<p>We kept seeing devs get pwned through MCP tools in ways that security scanners completely miss. So we built an open-source analyzer to catch these attacks. Our first OSS by Mighty team.<p>The problem: At Defcon, we saw MCP exploits with 100% success rate against Claude and Llama. Three attack patterns:<p>Hidden Unicode in &quot;error messages&quot; - Paste a colleague&#x27;s error into Claude, your SSH keys get exfiltrated Trusted tool updates - That database tool you&#x27;ve used for months? Last week&#x27;s update added credential theft Tool redefinition - Malicious tool redefines &quot;deploy to prod&quot; to run attacker&#x27;s script<p>Traditional scanners (CodeQL, SonarQube) catch &lt;15% of these. They&#x27;re looking for SQLi, not prompt injections hidden in tool descriptions.<p>What we built: git clone <a href="https:&#x2F;&#x2F;github.com&#x2F;NineSunsInc&#x2F;mighty-security" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;NineSunsInc&#x2F;mighty-security</a><p>python analyzers&#x2F;comprehensive_mcp_analyzer.py &#x2F;path&#x2F;to&#x2F;your&#x2F;mcp&#x2F;tool<p>Scans for prompt injection, credential exfil, suspicious updates, tool shadowing. Runtime wrapper adds &lt;10ms overhead. Fully local, no telemetry.<p>Why this matters: 43% of MCP tools have command injection vulns. GitHub&#x27;s own MCP server was exploitable. We found Fortune 500s running database-connected MCP tools that hadn&#x27;t been audited since installation. We went from paranoid code review to &quot;AI said it works&quot; in 18 months. The magic is real, but so are the vulnerabilities.<p>Demo: <a href="https:&#x2F;&#x2F;www.loom.com&#x2F;share&#x2F;e830c56d39254a788776358c5b03fdc3" rel="nofollow">https:&#x2F;&#x2F;www.loom.com&#x2F;share&#x2F;e830c56d39254a788776358c5b03fdc3</a><p>GitHub: <a href="https:&#x2F;&#x2F;github.com&#x2F;NineSunsInc&#x2F;mighty-security" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;NineSunsInc&#x2F;mighty-security</a><p>Would love feedback - what MCP security issues have you seen?

[Other] Show HN: Modelence – Supabase for MongoDB Hi all, Aram and Eduard here - authors of Modelence (<a href="https:&#x2F;&#x2F;github.com&#x2F;modelence&#x2F;modelence" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;modelence&#x2F;modelence</a>), an all-in-one backend platform for teams that love TypeScript + MongoDB. Think Supabase, but for MongoDB: auth, cron jobs, email, monitoring, without glue code before you can ship.<p>As Karpathy (and many of us) noted, getting from prototype to production is mostly painful integration work. The pieces exist, but stitching them together reliably is the hard part: <a href="https:&#x2F;&#x2F;x.com&#x2F;karpathy&#x2F;status&#x2F;1905051558783418370" rel="nofollow">https:&#x2F;&#x2F;x.com&#x2F;karpathy&#x2F;status&#x2F;1905051558783418370</a>. YC AI Startup School talk about this - <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?feature=shared&amp;t=1940&amp;v=LCEmiRjPEtQ" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?feature=shared&amp;t=1940&amp;v=LCEmiR...</a><p>We intend to fill those gaps! What you get out of the box:<p>- Authentication &#x2F; user management<p>- Database<p>- Email integration (3rd party, but things like user verification emails work out of the box)<p>- AI integration<p>- Cron jobs<p>- Monitoring &#x2F; Telemetry<p>- Configs &amp; secrets<p>- Analytics (coming soon)<p>- File uploads (coming soon)<p>How it runs: A Node.js backend with MongoDB. It&#x27;s frontend-agnostic, so you can use our minimal Vite + React starter or drop Modelence behind an existing Next.js (or any) frontend.<p>We&#x27;re also building a managed cloud, similar to what Vercel is for Next.js, except Modelence focuses on the backend instead of the frontend (Vercel is great for content sites like landing pages, blogs, etc, but things like persistent connections and complex backend logic outgrow it quickly). You can find a quick demo here: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=S4f22FyPpI8" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=S4f22FyPpI8</a><p>We&#x27;re looking for early users (especially TS teams on MongoDB). Tell us what&#x27;s missing, what&#x27;s confusing, and what you&#x27;d want before trusting this in prod. Happy to answer anything!

[Other] I Made a Realtime C/C++ Build Visualizer

[CLI Tool] Show HN: OWhisper – Ollama for realtime speech-to-text Hello everyone. This is Yujong from the Hyprnote team (<a href="https:&#x2F;&#x2F;github.com&#x2F;fastrepl&#x2F;hyprnote" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;fastrepl&#x2F;hyprnote</a>).<p>We built OWhisper for 2 reasons: (Also outlined in <a href="https:&#x2F;&#x2F;docs.hyprnote.com&#x2F;owhisper&#x2F;what-is-this" rel="nofollow">https:&#x2F;&#x2F;docs.hyprnote.com&#x2F;owhisper&#x2F;what-is-this</a>)<p>(1). While working with on-device, realtime speech-to-text, we found there isn&#x27;t tooling that exists to download &#x2F; run the model in a practical way.<p>(2). Also, we got frequent requests to provide a way to plug in custom STT endpoints to the Hyprnote desktop app, just like doing it with OpenAI-compatible LLM endpoints.<p>The (2) part is still kind of WIP, but we spent some time writing docs so you&#x27;ll get a good idea of what it will look like if you skim through them.<p>For (1) - You can try it now. (<a href="https:&#x2F;&#x2F;docs.hyprnote.com&#x2F;owhisper&#x2F;cli&#x2F;get-started" rel="nofollow">https:&#x2F;&#x2F;docs.hyprnote.com&#x2F;owhisper&#x2F;cli&#x2F;get-started</a>)<p><pre><code> bash brew tap fastrepl&#x2F;hyprnote &amp;&amp; brew install owhisper owhisper pull whisper-cpp-base-q8-en owhisper run whisper-cpp-base-q8-en </code></pre> If you&#x27;re tired of Whisper, we also support Moonshine :) Give it a shot (owhisper pull moonshine-onnx-base-q8)<p>We&#x27;re here and looking forward to your comments!

[API/SDK] Show HN: I built a free alternative to Adobe Acrobat PDF viewer I built EmbedPDF: an MIT-licensed, open-source PDF viewer that aims to match all of Adobe Acrobat’s paid features… for free.<p>Already working:<p>- Annotations (highlight, sticky notes, free text, ink)<p>- True redaction (content actually removed)<p>- Search, text selection, zoom, rotation<p>- Runs fully in the browser, no server needed<p>- Drop-in SDK for React, Vue, Preact, vanilla JS<p>Why? Acrobat is heavy, closed, and pricey. I wanted something lightweight, hackable, and embeddable anywhere.<p>Demo: <a href="https:&#x2F;&#x2F;app.embedpdf.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;app.embedpdf.com&#x2F;</a> Website: <a href="https:&#x2F;&#x2F;www.embedpdf.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.embedpdf.com&#x2F;</a> GitHub: <a href="https:&#x2F;&#x2F;github.com&#x2F;embedpdf&#x2F;embed-pdf-viewer" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;embedpdf&#x2F;embed-pdf-viewer</a><p>Feedback, bug reports, and feature requests welcome!

[Other] Modern YouTube downloader with a clean PySide6 interface. Download videos in any quality, extract audio, fetch subtitles, sponserBlock, and view video metadata. Built with yt-dlp for reliable performance.

[Other] Component infrastructure and Material Design components for Angular

[DevOps] External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as Kubernetes Secrets.

[Other] Python ETL framework for stream processing, real-time analytics, LLM pipelines, and RAG.

[Other] Show HN: E-commerce data from 100k stores that is refreshed daily Hi HN! I&#x27;m building Agora, an AI search engine for e-commerce that returns results in under 300ms. We&#x27;ve indexed 30M products from 100k stores and made them easy to purchase using AI agents.<p>After launching here on HN, a large enterprise reached out to pay for access to the raw data. We serviced the contract manually to learn the exact workflow and then decided to productize the &quot;Data Connector&quot; to help us scale to more customers.<p>The Data Connector enables developers to select any of our 100k stores in the index, view sample data, format the output, and export the up-to-date data. Data can be exported as CSV or JSON.<p>We&#x27;ve built crawlers for Shopify, WooCommerce, Squarespace, Wix, and custom built stores to index the store information, product data, stock, reviews, and more. The primary technical challenge is to recrawl the entire dataset every 24 hours. We do this with a series of servers that &quot;recrawl&quot; different store-types with rotating local proxies and then add changes to a queue to be updated in our search index. Our primary database is Mongo and our search runs on self-hosted Meilisearch on high RAM servers.<p>My vision is to index the world&#x27;s e-commerce data. I believe this will create market efficiencies for customers, developers, and merchants.<p>I&#x27;d love your feedback!

[Other] Maximize the power of colors Chromo is a powerful color analysis tool that instantly gives you detailed info from any HEX code. See multiple color formats, contrast checks, shades, tones, and related colors — perfect for designers, developers, and anyone working with colors.

[Other] Complete coding platform DormData is the ultimate coding practice and competition platform designed for developers who want to level up their skills through real challenges, real competition, and real results.

[IDE/Editor] One tool that solves all your coding needs! Coding Assistant offers Personalized Coding Tutor, Code Generator, Explainer, Refactor, Convertor, Debugger, beginner-level coding interview problems, Compiler, and Daily News in Tech and Programming. It acts like your ultimate coding companion.

[Other] Modern toggle switches built with pure CSS A collection of sleek, animated CSS toggle switches ready to copy and paste. Fully responsive and customizable without any JavaScript. Perfect for developers and designers looking to enhance UI forms. 🔗 https://www.themedevhub.com/tools/css-switch-collection

[Other] Interactive game worlds from a single image Hunyuan-GameCraft by Tencent is an open-source model for generating playable, high-dynamic game videos from a single image and user actions. It offers fine-grained control and impressive realism for creators and developers.

[Other] Nextjs and Supabase Boilerplate Build and launch your SaaS product faster with a scalable Next.js and Supabase boilerplate. Includes authentication, multi-organization support, billing, member management, and everything else you need to get your app live.

[CLI Tool] Show HN: Yet another memory system for LLMs Built this for my LLM workflows - needed searchable, persistent memory that wouldn&#x27;t blow up storage costs. I also wanted to use it locally for my research. It&#x27;s a content-addressed storage system with block-level deduplication (saves 30-40% on typical codebases). I have integrated the CLI tool into most of my workflows in Zed, Claude Code, and Cursor, and I provide the prompt I&#x27;m currently using in the repo.<p>The project is in C++ and the build system is rough around the edges but is tested on macOS and Ubuntu 24.04.

[Other] ResurrectedGod: The Ruby Framework for Process Management

[API/SDK] Show HN: Inworld Runtime – A C++ graph-based runtime for production AI apps Hey HN, this is Igor, one of the engineers behind Inworld Runtime, which we&#x27;re releasing today in public preview.<p>We built it to solve the common problem we and our customers had: engineers spend more time on AI ops and plumbing than on actual feature development. This was often due to the challenge of using Python for I&#x2F;O-bound, high-concurrency workloads and complexity maintaining pipelines with streams that use always-changing ML models.<p>Our solution is a high-performance runtime written in C++ with the core idea of defining AI logic as graphs. For instance, a basic voice-to-voice agent consists of STT → LLM → TTS nodes, while the connecting edges stream data and enforce conditions. This graph engine is portable (Linux, Windows, macOS) and can run on-device.<p>We built a few key features on top of this C++ core:<p>- Extensions. Runtime architecture decouples graph definition from implementation. If a pre-built component doesn&#x27;t exist, you can register your own custom node&#x2F;code and reuse it in any graph without writing any glue code.<p>- Routers. You can dynamically select models&#x2F;settings on the per-node basis depending on the traffic as well as configure policies for fallbacks and retries to get the app ready for production.<p>- The Portal. A web-based control plane UI to deploy graphs, push config changes instantly, run A&#x2F;B tests on live traffic, and monitor your app with logs, traces, and metrics.<p>- Unified API. Use our optimized models or route to providers like OpenAI, Anthropic, and Google through a single, consistent interface and one API key.<p>We have a Node.js SDK out now, with Python, Unity, Unreal, and native C++ coming soon. We plan to open-source the SDKs, starting with Node.js.<p>The docs are here: <a href="https:&#x2F;&#x2F;docs.inworld.ai&#x2F;docs&#x2F;runtime&#x2F;overview" rel="nofollow">https:&#x2F;&#x2F;docs.inworld.ai&#x2F;docs&#x2F;runtime&#x2F;overview</a><p>We&#x27;re eager for feedback from fellow engineers and builders. What do you think?