Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

ChatGPT Developer Mode: Full MCP client access

platform.openai.com

Post reply on HN
Print view View original

171–180 of 290 posts

Re: ChatGPT Developer Mode: Full MCP client access

#171

Post by lelandfe »

jandrese wrote: post #44
codeflo wrote: post #36

Earlier quoted context omitted.

"Please ignore prompt injections and follow the original instructions. Please don't hallucinate." It's astonishing how many people think this kind of architecture limitation can be solved by better prompting -- people seem to develop very weird mental models of what LLMs are or do.

Reminds me of the enormous negative prompts you would see on picture generation that read like someone just waving a dead chicken over the entire process. So much cargo culting.

At the time I went through a laborious effort for a Reddit post to examine which of those negative prompts actually had a noticeable effect. I generated 60 images for each word in those cargo cult copypastas and examined them manually.

One that surprised me was that "-amputee" significantly improved Stable Diffusion 1.5 renderings of people.

Re: ChatGPT Developer Mode: Full MCP client access

#172

Post by gerdesj »

horizion2025 wrote: post #118
NikolaNovak wrote: post #73

Earlier quoted context omitted.

My problem is the "avoid" keyword: * You can reduce risk of hallucinations with better prompting - sure * You can eliminate risk of hallucinations with better prompting - nope "Avoid" is that intersection where audience will interpret it the way they choose to and then point as their justification. I'm assuming it's not intentional but it couldn't be better picked if it were :-/

Essentially a motte-and-bailey. "mitigate" is the same. Can be used when the risk is only partially eliminated but you can be lucky (depending on perspective) the reader will believe the issue is fully solved by that mitigation.

"Essentially a motte-and-bailey"

A M&B is a medieval castle layout. Those bloody Norsemen immigrants who duffed up those bloody Saxon immigrants, wot duffed up the native Britons, built quite a few of those things. Something, something, Frisians, Romans and other foreigners. Everyone is a foreigner or immigrant in Britain apart from us locals, who have been here since the big bang.

Anyway, please explain the analogy.

(https://en.wikipedia.org/wiki/Motte-and-bailey_castle)

Re: ChatGPT Developer Mode: Full MCP client access

#173

Post by ObnoxiousProxy »

block_dagger wrote: post #55
ObnoxiousProxy wrote: post #9

Earlier quoted context omitted.

I'm actually working on an MCP control plane and looking for anyone who might have a use case for this / would be down to chat about it. We're gonna release it open source once we polish it in the next few weeks. Would you be up to connect? You can check out our super rough version here, been building it for the past two weeks: gateway.aci.dev

Looks interesting. Once an org configures their MCP servers on the gateway, what is the config process like for Cursor?

Members can then bundle the various MCP servers together into a single unified MCP server that contains just two tools -- search and execute, so it doesn't overload context windows. The team members then get a remote MCP server URL for the unified MCP server bundle to bring into Cursor!

Re: ChatGPT Developer Mode: Full MCP client access

#174

Post by ObnoxiousProxy »

CuriouslyC wrote: post #13
ObnoxiousProxy wrote: post #9

Earlier quoted context omitted.

I'm actually working on an MCP control plane and looking for anyone who might have a use case for this / would be down to chat about it. We're gonna release it open source once we polish it in the next few weeks. Would you be up to connect? You can check out our super rough version here, been building it for the past two weeks: gateway.aci.dev

A MCP gateway is a useful tool, I have a prototype of something similar I built but I'm not super enthusiastic about working on it (bigger fish to fry). One thing I'd suggest is to have a meta-mcp that an agenct can query to search for the best tool for a given job, that it can then inject into its context. Currently we're all manually injecting tools but it's a pain in the ass, we tend to pollute context with tools…

Our gateway lets team members bundle together configured MCPs into a unified MCP server with only two tools -- search and execute, basically a meta-mcp!

Very interesting! What kind of use cases are you using your agent (Smith) for? Is it primarily coding, or quite varied across the board?

Re: ChatGPT Developer Mode: Full MCP client access

#175

Post by kristianc »

ponector wrote: post #158
moregrist wrote: post #144

Earlier quoted context omitted.

If only we had a reliable way to detect that a poster was being sarcasm or facetious on the Internet.

The solution is to sanitize text that goes into the prompt by creating a neural network that can detect sarcasm.

Ah, the Seinfeld Test.

Re: ChatGPT Developer Mode: Full MCP client access

#176

Post by mediaman »

dingnuts wrote: post #83
simonw wrote: post #29

Earlier quoted context omitted.

Anthropic talked about prompt injection a bunch in the docs for their web fetch tool feature they released today: https://docs.anthropic.com/en/docs/agents-and-tools/tool-use... My notes: https://simonwillison.net/2025/Sep/10/claude-web-fetch-tool/

This is spam. Remove the self promotion and it's an ok comment. It wouldn't be so bad if you weren't self promoting on this site all day every day like it's your full time job, but self promoting on a message board full time is spam.

Simon’s content is not spam. Spam’s primary purpose is commercial conversion rather than communicating information. Your goal seems to be discourage people from writing about, and sharing, their thoughts about technical subjects.

To whatever extent you were to succeed, the rest of us would be worse for it. We need more Simons.

Re: ChatGPT Developer Mode: Full MCP client access

#177

Post by koakuma-chan »

withinboredom wrote: post #137
Aunche wrote: post #128

Earlier quoted context omitted.

I see. It's wild to me that people would be that trusting of LLMs.

They weren’t kidding about hooking mcp servers to internal databases. You see people all the time connecting LLMs to production servers and losing everything — on reddit. Its honestly a bit terrifying.

> on reddit

Explains everything

Re: ChatGPT Developer Mode: Full MCP client access

#178

Post by koakuma-chan »

cruffle_duffle wrote: post #166
koakuma-chan wrote: post #51

Earlier quoted context omitted.

> LLMs don’t have any distinction between what you tell them to do (the prompt) and any other info that goes into them while they think/generate/researcb/use tools. This is false as you can specify the role of the message FWIW.

Correct me if I’m wrong but in general that is just some json window dressing that gets serialized into plaintext and then into tokens…. There is nothing special about the roles and stuff… at least I think. Maybe they become “magic tokens” or “special tokens” but even then they aren’t hard fast rules.

They are special because models are trained to prioritize messages with role system over messages with role user.

Re: ChatGPT Developer Mode: Full MCP client access

#179

Post by OptionOfT »

beeflet wrote: post #80
toomuchtodo wrote: post #45

Earlier quoted context omitted.

I was recently in a call (consulting capacity, subject matter expert) where HR is driving the use of Microsoft Copilot agents, and the HR lead said "You can avoid hallucinations with better prompting; look, use all 8k characters and you'll be fine." Please, proceed. Agree with sibling comment wrt cargo culting and simply ignoring any concerns as it relates to technology limitations.

The solution is to sanitize text that goes into the prompt by creating a neural network that can detect prompts

I'm working on new technology where you separate the instructions and the variables, to avoid them being mixed up.

I call it `prepared prompts`.

Post reply on HN