Natoma Labs @natomalabs

Accelerate enterprise adoption of agentic AI, without compromising security – now part of @Snowflake. natoma.ai San Francisco, CA Joined October 2023

Tweets

122
Followers

139
Following

137
Likes

63

Natoma Labs @natomalabs

a month ago

see it in action: natoma.ai/claude

0 0 0 41 0

View Details

Natoma is now live on Claude. What does that mean? Imagine your AE opens Claude on Monday morning. "What should I prioritize this week?" Claude pulls their open pipeline from their CRM, surfaces risk signals from Gong calls, and drafts a Slack standup. In one prompt. That's not a demo. That's Natoma, live on Claude today! Every data source your team uses. Every access control already respected. No new logins. No copy-pasting between tabs. AND with full observability and governance! We built the layer that makes Claude enterprise-ready and we're proud to have built it alongside @AnthropicAI Big thanks to the @AnthropicAI team for partnering with us on this

1 0 2 91 0

View Details

Natoma Labs @natomalabs

a month ago

200K MCP servers on public IPs. STDIO transport runs any OS command it gets. Anthropic says it's by design. 9 of 11 registries accepted a malicious test package without review. This is not a security failure. It is an inventory failure. venturebeat.com/security/mcp-s…

1 1 2 118 0

View Details

Natoma Labs @natomalabs

2 months ago

Full walkthrough: natoma.ai/blog/how-to-gi…

0 0 0 15 0

View Details

Natoma Labs @natomalabs

2 months ago

Your AI agent needs real tools to be useful. Giving it access to everything is a security problem. NVIDIA NemoClaw isolates compute. Natoma governs tool calls. Zero service credentials inside the sandbox.

2 1 2 94 0

View Details

Natoma Labs @natomalabs

2 months ago

Three paths to connect agents to external systems: - Direct API: agent writes HTTP in a sandbox. Fine for 1 agent <> 1 service. Breaks at scale. - CLI: agent runs shell commands. Works in local envs with a filesystem. Can't reach mobile, web, or cloud. - MCP: agent connects to a server over a standard protocol. Built for cloud-hosted production agents. Mature integrations ship all three. MCP is the one that compounds. One remote server reaches every compatible client (Claude, ChatGPT, Cursor, VS Code) across every deployment environment, and gets more capable as new protocol extensions land without you shipping anything new.

ClaudeDevs @ClaudeDevs

2 months ago

New blog: Building agents that reach production systems with MCP. When should agents use direct APIs vs CLIs vs MCP? Plus patterns for building MCP servers, context-efficient clients and pairing MCP with skills. claude.com/blog/building-…

92 318 3K 479K 5K

0 1 2 144 0

View Details

Natoma Labs @natomalabs

2 months ago

Past 50 MCP tools, agent accuracy drops. By 200+, you lose 1 in 7 queries and token costs spike 10x. Our engineer @KarnikShreyas built the fix: search-then-execute with hybrid retrieval. 97.5% recall at enterprise scale. Constant context cost. Full write-up: natoma.ai/blog/the-invis…

0 1 4 317 0

View Details

Natoma Labs @natomalabs

2 months ago

Anthropic's Claude Code source just leaked via npm source maps. 512K lines of TypeScript. 1,900 files. 50 slash commands, 40 agent tools, 140 UI components, a multi-agent swarm coordinator, and a full IDE bridge system. This is what a production agentic CLI looks like at scale. github.com/instructkr/cla…

0 0 3 95 1

View Details

Natoma Labs @natomalabs

2 months ago

@evanplaice Sadly a human here 🤷‍♂️

0 0 1 11 0

View Details

Natoma Labs @natomalabs

2 months ago

The code wasn't the vulnerability. A maintainer's credentials were. One compromised account. 100M+ weekly installs exposed. No code review would have caught this because the code was fine until it wasn't. Identity governance can't stop at your employees. Every maintainer in your supply chain is an attack surface.

Feross @feross

2 months ago

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages. The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise. This is textbook supply chain installer malware. axios

541 4K 16K 12.4M 7K

1 1 4 83 0

View Details

Natoma Labs @natomalabs

3 months ago

AI agents need credentials to do real work. @1Password just launched Unified Access to govern credentials across humans, machines, and agents. Natoma is a collaborating partner. 1Password governs the credential, we govern what agents do with them.

1Password @1Password

3 months ago

Today we’re introducing 1Password® Unified Access. As AI agents start operating inside real production environments, organizations need visibility into how credentials and access are actually used. Unified Access helps security teams discover, secure, and audit access across

289 101 702 804K 658

0 1 6 6K 2

View Details

Natoma Labs @natomalabs

3 months ago

Your autonomous agent can reach Slack. Nothing governs what it does once it gets there. NemoClaw solves the compute boundary. Tool governance is a different problem. natoma.ai/blog/what-nvid…

0 0 2 32 0

View Details

Natoma Labs @natomalabs

3 months ago

If you're building with AI or agents, what skills or servers should we add next? Would love your feedback 👇

0 0 0 16 0

View Details

Natoma Labs @natomalabs

3 months ago

Free. Forever. natoma.run Find. Try. Build.

1 0 0 26 0

View Details

Natoma Labs @natomalabs

3 months ago

We just added Skills to Playground by Natoma. Skills are everywhere - buried in repos, threads, and docs. No structure, no easy way to know if something's worth using before you try it. We fixed that. 🧵

1 1 4 180 1

View Details

Natoma Labs @natomalabs

3 months ago

Full technical report on the LiteLLM compromise: github.com/BerriAI/litell…

0 0 0 8 0

View Details

Natoma Labs @natomalabs

3 months ago

The enterprises pulling ahead are not the ones with the most sophisticated AI. They are the ones who can answer: what AI is running in our environment, where, connected to what, doing what? That question is the foundation. Everything else comes after.