Independent reporting on artificial intelligence.


The Frontier Wire

Section

Tools

Reviews and field notes on the models, frameworks and products people actually build with.

An editorial mix across topics, with original article dates.

13 articlesRSS for tools


AI agent security: a practical guide to securing LLM apps and agents

The model is not a security boundary. Eight concrete failures in LLM apps and agents, from provider keys in browser bundles to injected tool calls and runaway spend, each mapped to the OWASP LLM Top 10, with the code-level fix and an open-source agent skill that audits a codebase for them.

15 min read

LLM cost optimization: a measured playbook for cutting API spend

Every LLM bill is requests times tokens times price. A playbook for shrinking each factor without a quality regression: attribution, right-sized models, complexity routing, prompt trimming, prompt and response caching, Batch APIs, loop caps and budgets, plus the open-source llm-cost-reduction agent skill.

15 min read

MCP best practices: tool budgets, least privilege and approval gates

Connecting one MCP server takes a line of config. Running twenty safely across a team takes tool budgets, per-identity allow-lists, approval gates, sane transports, health checks and logs. The practices, checked against the 2026-07-28 MCP specification, and an open-source agent skill that audits a setup against them.

15 min read

Claude Code pricing: plans, API rates and what drives the bill

Claude Code is included in every paid Claude plan and can also run on pay-as-you-go API keys, cloud accounts or a gateway. Which credential a developer uses decides which bill a request lands on, and context, caching and model choice decide how large that bill gets.

20 min read

npx skills and skills.sh: a complete guide to the skills CLI

The skills CLI installs SKILL.md folders from GitHub into 79 coding agents, and skills.sh is the directory built on its telemetry. Every command in version 1.7.4, project and global scope, the symlink layout, the lock file and its hashes, and the warning printed on every install, checked against the source.

13 min read

Claude Code router setups: running Claude Code on other models

Claude Code talks to one API format, and anything that speaks that format can answer it. Routers, gateways and local servers use that to swap in other models. The configuration takes minutes; knowing what breaks on the way takes longer.

17 min read

What an AI gateway does, and what it costs to run one

Most teams that use more than one model provider end up putting a proxy in front of all of them. This is what that proxy does, where the main products differ, and a detailed look at one of them, Bifrost, based on its documentation and a local install.

11 min read