Cascadity Audio
← Maker Views
0

OpenCode 2.0 runs as a background service with a rebuilt API

The open-source coding agent explains what it changed after watching millions of daily users.

OpenCode 2.0 now runs its server automatically as one background process that the terminal UI, web interface, desktop app and scripts all share, and it can be paired with other machines. The team rewrote its API from scratch, shipped an @opencode/client package, and added "code mode," a small JavaScript interpreter that turns MCP servers and OpenAPI endpoints into functions the agent calls from scripts.

Read it at the source
Cascadic Analysis 2
UndertowPrivilege escalation + credential propagation

What hidden risk could pull against this, even if the news is good?

OpenCode 2.0 runs as one background service that every interface and script talks to, and it can be paired with other machines. One long-running process that holds a developer's credentials and can be reached from several places is a valuable target.

0
UndertowPrompt injection may be fundamentally impossible to eliminate

What hidden risk could pull against this, even if the news is good?

Code mode turns MCP servers and OpenAPI endpoints into functions the agent calls from scripts it writes itself. If text the agent reads, from a web page or a repository, can steer what it writes, those scripts can call real APIs on the user's behalf.

0
Rabbit Holes 1
  • Model Context Protocol

    After exploring OpenCode 2.0, the standard its code mode builds on is Model Context Protocol.

    The open standard Anthropic introduced in 2024 for connecting AI systems to outside tools and data, since adopted by OpenAI and Google DeepMind.

    Wikipedia · Wade · 5 min

    0