AI extensions digest, Oct 25: an iOS reverse-engineering platform, a Rust-speed video engine, and one front door for MCP
Three finds: Vesper gives agents structured MCP tools for iOS reverse engineering, Kinetograph renders Remotion-compatible video through a Rust GPU compositor (source-available PolyForm license), and MCPtoCodeMode puts every MCP server behind three tools and a sandbox. Licenses read from each repo.
AI extensions digest, Oct 25: an iOS reverse-engineering platform, a Rust-speed video engine, and one front door for MCP
Three finds from the last few days on GitHub: Vesper gives an agent structured MCP tools and skills for iOS reverse engineering, Kinetograph renders Remotion-compatible video projects through a Rust GPU compositor, and MCPtoCodeMode puts every MCP server you run behind three tools and a sandbox. Licenses read from each repo: two MIT, one PolyForm Small Business - details below, and the usual reminder that two of these projects are days old.
Vesper: iOS reverse engineering through your agent
Vesper (Wtrwx/vesper) is an iOS reverse-engineering platform that connects an MCP client to SSH, Frida and an optional licensed IDA installation, then exposes runtime inspection, app automation, decryption, debugging and tweak development as structured tools. On top of the primitives it ships a vesper-ios Agent Skill that composes them into full workflows - inspection, decryption plus class-dump, tweak development over SSH, and debugging - with setup examples for Codex, Claude Code and Cursor in the docs. The pitch is that the agent drives the whole RE loop instead of the human copy-pasting between a terminal, Frida scripts and a decompiler. MIT licensed (LICENSE file read), Python 3.11+, macOS or Linux host. 53 stars as of October 25. One caution that belongs with any decryption-capable tool: keep it pointed at apps and devices you are authorized to inspect.
Kinetograph: a programmatic video engine with a license to read twice
Kinetograph (0xS4N4TG/kinetograph) re-implements Remotion's API - the write-your-video-in-TypeScript model, with CSS, SVG, Canvas 2D, WebGL shaders and Web Audio - and renders it through a Rust GPU compositor loaded into Node as an N-API addon. The claim is that existing Remotion projects render as they are, with remotion imports resolving to Kinetograph's own implementation, and the repo's launch example is a 1,184-frame 1080p film with sound rendered in 26 seconds on a laptop. That number, and the per-example render times in the README, are the author's own measurements on an Apple M4, not independent benchmarks. The reason to feature it in this digest is the agent angle: the project documents agent-driven authoring explicitly. The reason to read it twice is the license: PolyForm Small Business 1.0.0, a source-available license that is free only below a company-size threshold, with a separate COMMERCIAL.md. That is not an OSI open-source license - if your organization is past the threshold, this is a sales conversation, not a dependency. 46 stars as of October 25, created October 23.
MCPtoCodeMode: one MCP server in front of all the others
MCPtoCodeMode (minkaworks/mcptocodemode) attacks the context-flooding problem from the code-mode direction: instead of every connected server's tool definitions going into every prompt, the model sees three tools and writes one short program that calls the other servers inside a sandbox. The example in the README - totalling paid orders across 25 files - turns 26 tool calls and 26 model turns into one generated script whose only way out is the MCP servers you configured; the sandbox itself has no network, no filesystem and no credentials. Setup is npx -y mcptocodemode setup, which detects installed coding agents (Claude Code, Codex, Cursor, Grok, OpenCode, Pi, Claude Desktop) and wires itself in after confirmation. The repo publishes its method and caveats in REPORT.md: seven official reference servers, 55 tools, benchmarked with Claude Sonnet 5.5 through OpenRouter - author-run numbers, so treat them as a hypothesis to reproduce, not gospel. MIT licensed (LICENSE file read). 9 stars as of October 25 - a day old and small, worth watching.
The short version
Vesper is the most ambitious of the three and the one to try first if iOS work is your world, with the cleanest license. Kinetograph's engine work is real and fast, but the PolyForm license decides who can actually adopt it - read COMMERCIAL.md before the README wins you over. MCPtoCodeMode is the smallest and the most idea-dense: if code-mode beats tool-flooding at your scale, the pattern matters more than this particular implementation.