TRACK
The Open-Source Advantage
Why open-source AI infrastructure beats vendor lock-in, the Windsurf lesson, the self-hosting option, and the open standards that keep you in control.
3 articles in this track
Frequently Asked Questions
What happened with Windsurf?
In 2025, Anthropic cut API access to Codeium, the company behind Windsurf (an AI coding tool). Over a million developers lost functionality overnight. The tool they depended on stopped working because of a business decision between two companies they had no control over. It's the clearest case study for why proprietary AI platforms are a risk.
Does open source mean less secure?
The opposite. Open-source code is auditable, you can read every line. Proprietary tools are black boxes. The MCP Trust Framework (MTF) adds structured security assessment on top. Open source with MTF scanning is more transparent and more secure than closed-source alternatives with no external audit.
Can I self-host AI agent infrastructure?
Yes. NimbleBrain's stack is designed for it. MCP servers run anywhere. Upjack apps are self-contained. mpak bundles are downloadable and self-hostable. You can run your entire agent tool layer on your own infrastructure with no external dependencies.
What is NimbleBrain's open-source stack?
Three components: Upjack (upjack.dev), a declarative framework for building AI apps as schemas and skills. mpak (mpak.dev), an MCP server registry with security scanning. MCP Trust Framework (mpaktrust.org), the security standard for evaluating MCP servers. All open source, all production-ready.