--- title: Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless description: Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion — about 8x the $1.3B valuation OpenRouter received just days ago — which would... canonical: https://daily.dev/posts/stripe-eyes-openrouter-for-10b-mcp-2026-goes-stateless-kjmrn2khp twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless | daily.dev og:description: Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion — about 8x the $1.3B valuation OpenRouter received just days ago — which would... og:url: https://daily.dev/posts/stripe-eyes-openrouter-for-10b-mcp-2026-goes-stateless-kjmrn2khp og:image: https://api.daily.dev/og/posts/kjMRN2kHp.png og:image:alt: Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless **[Backend Digest](https://daily.dev/sources/backend_digest)** · 5 min read · 0 upvotes · 0 comments ## Summary Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion — about 8x the $1.3B valuation OpenRouter received just days ago — which would give Stripe billing control over a routing layer that sits above 400+ LLM providers. The MCP 2026 spec dropping July 28 removes session IDs entirely, replacing them with stateless HTTP and per-request metadata, making round-robin load balancing finally viable. Fly.io is pivoting hard to ephemeral agent sandboxes called Sprites, with Docker's former CEO taking over. Meanwhile, 170,000 unpatched Palo Alto GlobalProtect instances are being actively ransomed by Qilin, weeks after a patch was available. ## Content **TLDR:** Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion — about 8x the $1.3B valuation OpenRouter received just days ago — which would give Stripe billing control over a routing layer that sits above 400+ LLM providers. The MCP 2026 spec dropping July 28 removes session IDs entirely, replacing them with stateless HTTP and per-request metadata, making round-robin load balancing finally viable. Fly.io is pivoting hard to ephemeral agent sandboxes called Sprites, with Docker's former CEO taking over. Meanwhile, 170,000 unpatched Palo Alto GlobalProtect instances are being actively ransomed by Qilin, weeks after a patch was available. --- ## Stripe in talks to acquire OpenRouter for $10B Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion, according to the Wall Street Journal — about eight times the $1.3B valuation OpenRouter received just days earlier when it raised $113M. OpenRouter routes requests across 400+ models from 70+ providers through a single API, and Stripe already handles its payments. The strategic logic: companies increasingly mix models based on task and cost, and OpenRouter sits at that decision layer collecting usage data and pricing influence across every major lab. Databricks and other large tech firms have also reportedly shown interest, and the deal isn't finalized. [Read more](https://daily.dev/posts/SPfk8wSJs) ## MCP 2026 spec drops July 28 with stateless core and formal extension model The MCP 2026 specification releases July 28 and is the largest revision since launch. The headline change removes the initialize/initialized handshake and session IDs entirely — protocol metadata now travels in _meta on every request, enabling plain round-robin load balancing without sticky sessions or Redis. Extensions become a formal first-class mechanism with reverse-DNS identifiers; the first two are MCP Apps (server-rendered HTML UIs in sandboxed iframes) and Tasks (long-running work with explicit lifecycle). Three original protocol features — Roots, Sampling, and Logging — are deprecated, and a 12-month removal lifecycle is now formalized. [Read more](https://daily.dev/posts/QXzMUVMrG) ## Fly.io pivots to agent sandboxes, names Docker's former CEO Fly.io is abandoning its developer PaaS identity and going all-in on Sprites — ephemeral cloud computers built for AI coding agents. Two features define the product: the Sprite Block Device enables drive forking and checkpoint-restore so agents can branch from a known state and roll back without starting over, and Connectors handle authenticated calls to external services without exposing credentials to the agent's context. Founder Kurt Mackey is stepping down as CEO; Scott Johnston, formerly CEO of Docker, is taking over. Fly.io is raising a new funding round to back the direction. [Read more](https://daily.dev/posts/V9MPMY2BI) ## Qilin ransomware actively exploiting unpatched Palo Alto GlobalProtect, 170K instances exposed CVE-2026-0257, a critical authentication bypass in Palo Alto PAN-OS GlobalProtect, was patched May 13 and added to CISA's KEV catalog May 29 — and Qilin ransomware affiliates are now running a methodical playbook against it: LSASS dump, NTDS extraction, lateral movement via PsExec and RDP, exfiltration via Rclone to MEGA, event log wipe, then encryption. Between 167,000 and 172,000 GlobalProtect instances remain exposed. Qilin accounted for 14% of Q2 2026 ransomware attacks. Consistent staging at C:\PerfLogs\ across victims is a cheap detection signal; credential rotation for any account that could have authenticated through GlobalProtect is the immediate priority. [Read more](https://daily.dev/posts/BSaHeIquX) --- ## Also notable - **Microsoft 365 outage on July 23 traced to automated maintenance bug removing IP routes in West US:** A bug in Microsoft's automated network maintenance system incorrectly marked additional devices as part of a maintenance event, pulling IP routes from more devices than intended in the West US Azure region and taking down SharePoint, OneDrive, Teams, and dozens of Azure services for roughly two hours before a rollback restored service at 3:41 PM ET. [Read more](https://daily.dev/posts/6v6FhC5Ky) - **IRGC claims cruise missile strike on AWS Bahrain data center, 18 US tech firms declared targets:** The IRGC claimed on July 21 to have destroyed the AWS ME-South-1 facility in Bahrain using cruise missiles — at least the third attack on the same site since March 2026 — with earlier strikes causing 24+ hours of multi-AZ outages; CSIS has identified 29 tech facilities across the Gulf on Iran's expanded target list. [Read more](https://daily.dev/posts/5wVI4F1e9) - **Postgres LISTEN/NOTIFY hits 60K writes/second with batched notification flushing:** Batching NOTIFY calls in memory and flushing periodically — rather than taking the global exclusive lock on every commit — lifts Postgres LISTEN/NOTIFY throughput from ~2.9K to 60K stream writes per second on a single server with 15-100ms latency, a 20x improvement that makes it viable for real workloads. [Read more](https://daily.dev/posts/WEhhiXOjN) - **Kafka 4.1 ELR (KIP-966) closes the 'Last Replica Standing' data loss gap:** Eligible Leader Replicas, enabled by default in Kafka 4.1 (KRaft only), track replicas that held data up to the frozen High Watermark when ISR drops below min.insync.replicas, preventing committed message loss in the rare scenario where only one replica survives — consumers will notice that a degraded ISR now freezes consumption visibility. [Read more](https://daily.dev/posts/0e0n2w9kY) - **Fake corepack.org site serving infostealer and proxyjacking malware to Node.js developers:** A typosquatting site at corepack[.]org is exploiting the recent removal of Corepack from Node.js bundles to serve an infostealer that harvests browser profiles and SSH keys, establishes persistence via registry run keys, and enrolls the machine as a proxy exit node — install only via `npm install -g corepack` from the official registry. [Read more](https://daily.dev/posts/Gewefydur) --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#ai-gateway](https://daily.dev/tags/ai-gateway), [#mcp](https://daily.dev/tags/mcp), [#openrouter](https://daily.dev/tags/openrouter), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/stripe-eyes-openrouter-for-10b-mcp-2026-goes-stateless-kjmrn2khp) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"DiscussionForumPosting","mainEntityOfPage":"https://daily.dev/posts/stripe-eyes-openrouter-for-10b-mcp-2026-goes-stateless-kjmrn2khp","headline":"Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless","text":"Stripe is in preliminary talks to acquire OpenRouter for roughly $10 billion — about 8x the $1.3B valuation OpenRouter received just days ago — which would give Stripe billing control over a routing layer that sits above 400+ LLM providers. The MCP 2026 spec dropping July 28 removes session IDs entirely, replacing them with stateless HTTP and per-request metadata, making round-robin load balancing finally viable. Fly.io is pivoting hard to ephemeral agent sandboxes called Sprites, with Docker's former CEO taking over. Meanwhile, 170,000 unpatched Palo Alto GlobalProtect instances are being actively ransomed by Qilin, weeks after a patch was available.","url":"https://daily.dev/posts/stripe-eyes-openrouter-for-10b-mcp-2026-goes-stateless-kjmrn2khp","datePublished":"2026-07-25T04:18:44.984Z","dateModified":"2026-10-15T02:22:27.833Z","author":{"@type":"Organization","name":"Backend Digest","logo":"https://media.daily.dev/image/upload/s--9uCSrsAb--/f_auto,q_auto/v1773839398/logos/backend_digest?_a=BAMAMiiu0","url":"https://daily.dev/sources/backend_digest"},"interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"isPartOf":{"@type":"WebPage","url":"https://daily.dev/sources/backend_digest","name":"Backend Digest"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Backend Digest","item":"https://daily.dev/sources/backend_digest"},{"@type":"ListItem","position":3,"name":"Stripe eyes OpenRouter for $10B, MCP 2026 goes stateless"}]} ```