Good morning. It's Sunday, April 19th, 2026. Here's your agent platform research briefing — fresh stories only.

**Anthropic Claude Design — Figma Killer Arrives** — On Friday, Anthropic launched Claude Design, a standalone AI workspace that turns plain-text prompts into finished prototypes, slide decks, marketing one-pagers, and interactive mockups. Built on Claude Opus 4.7, it's available to Pro, Max, Team, and Enterprise subscribers via a palette icon in the Claude.ai sidebar. The market's reaction was immediate: Figma stock dropped 7.28% on the day, settling at $18.84 from $20.32, and Adobe also fell. VentureBeat called it "a product that lets anyone who can type a sentence create the kind of interactive prototype that once required years of design training and a Figma license." This follows Claude Cowork going GA earlier in the week — Anthropic is clearly on an aggressive enterprise land-grab.

**xAI Launches Grok Speech APIs — Undercutting Competitors by 60%** — On April 17th, xAI dropped standalone Grok Speech-to-Text and Text-to-Speech APIs aimed squarely at ElevenLabs, Deepgram, and AssemblyAI. Pricing: STT at $0.10 per hour for batch, $0.20 per hour for streaming — significantly below competitors. TTS at $4.20 per million characters. The APIs are built on the same stack powering Grok Voice in millions of mobile apps and Tesla vehicles. xAI also simultaneously launched a Grok Voice Agent API that bundles tool calling and real-time data search, letting developers build full voice agents in dozens of languages. For context: xAI's entry into commodity speech APIs at this price point puts real pressure on the voice AI infrastructure layer.

**Google Gemini Hits Mac and Windows Native Apps** — Google this week launched native Gemini desktop apps for both Windows (Tuesday) and macOS (Wednesday). The Mac app supports screen sharing with Gemini for contextual help on documents, code, and data — requiring Accessibility permissions for full-page browser access. Perplexity also launched its "Personal Computer" app for Mac in the same window. This is a three-way race for AI desktop assistant dominance: ChatGPT desktop, Claude desktop via Cowork, and now Gemini — all going native simultaneously in the same week.

**Ring-a-Ding: OpenClaw Gets Outbound Phone Call Skill** — Launched today via GlobeNewswire, Ring-a-Ding is a new OpenClaw skill giving AI agents the ability to make real outbound phone calls — booking appointments, requesting quotes, checking availability. It handles phone number management, SIP connectivity, real-time voice routing, and call transcription. Priced at $19/month. This is the first purpose-built telephony skill for OpenClaw, filling a gap that previously required rolling your own SIP integration. Notable timing given xAI's new Grok speech APIs — expect Ring-a-Ding to be an early integration target.

**MCP CVE-2026-39313 — DoS via Single Large POST Request** — A new vulnerability in the popular mcp-framework Node.js library (used for building MCP servers) was disclosed this week. The readRequestBody() function concatenates HTTP request body chunks into a string with no size limit — meaning a remote unauthenticated attacker can crash any mcp-framework HTTP server by sending a single oversized POST to the /mcp endpoint, exhausting server memory. Fixed in version 0.2.22. This is part of a continuing stream of MCP ecosystem CVEs — we're now well past a dozen significant MCP-related vulnerabilities in the past two months, with SecurityWeek noting a deeper "by design" flaw in how MCP handles command execution that Anthropic has declined to patch at the root level.

That wraps up today's briefing. Shorter than usual — Sunday was quiet on the framework front, but the Claude Design launch and Grok speech API price war are the real stories this week. See you tomorrow.