October 21, 2026 · The right AI tools for the job, in 5 minutes.

This week: Copilot is retiring three models on Nov 16, DeepSeek made web search for agents cheap, and Meta opened the weights on Muse Spark. Plus a breach at OpenCode and how to check where your API keys live.

Forwarded this? Get it every Wednesday

Disclosure: none of the links in this issue are affiliate links, and nothing in it is sponsored. When an issue does have them, affiliate links are marked (affiliate) and sponsored sections are labeled.

📰 Top AI news

  1. GitHub Copilot will retire three models on Nov 16 (announced Oct 15, 2026): GitHub will deprecate Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra across all Copilot experiences, with one exception: Claude Opus 4.8 will remain available to individual GitHub Copilot subscribers on annual plans. GitHub suggests Claude Opus 5.5 in place of the Claude models and GPT-6.1 Sol or GPT-6 Luna in place of Terra. Why it matters: if a script or workflow pins one of those model names, update it before Nov 16. Source

  2. DeepSeek opens its Search and Fetch APIs to everyone (Oct 17, 2026): each endpoint costs $0.75 per 1,000 calls. Calls made through DeepSeek Harness, Claude Code or Codex with a DeepSeek API key are free until Oct 31 at 16:00 UTC (noon ET). DeepSeek also shipped DeepSeek-V4.1-Flash-1017 the same day, with open weights on Hugging Face. Why it matters: web search for agents just got cheap. Test it free through those tools now and budget for the paid rate from Oct 31. Source

  3. Meta releases the weights for Muse Spark Open (Oct 15, 2026): Meta published Muse Spark Open, a multimodal model with 816B total parameters (42B active) and a 1M-token context window, built for coding and agent work. You can call it through hosts like OpenRouter, Together AI and Groq. Meta says it runs on two Apple M5 Ultra Mac Studios. Its commercial terms are limited, so read the Muse Model License before you ship with it. Why it matters: Meta calls it the most capable US open-weight model to date, and you can run it yourself if you have the hardware. Source

Also this week: OpenCode says a breach hit 1.4% of OpenCode Console users, a subset of those who had linked external providers. Affected users were emailed. If you didn't get an email, OpenCode says you weren't affected. (OpenCode on X)

🧪 New tools worth trying

  1. Retriever AI (rtrvr.ai): a browser agent that pulls data from websites, researches prospects and fills in forms, in your Chrome or a cloud browser. Best for repetitive research and form work. Free tier: $0 Free Mode, no AI API key needed. It shows sponsored cards and has a daily fair-use limit. Schedules, triggers and API or MCP control of its agent need a paid plan. (pricing page)

  2. Pomerado: turns a website into an API or MCP tool your agent can call, so it stops clicking through the site in a browser every time. Best for giving Claude Code or Codex access to sites that have no API. Free tier: $0 a month for 100 tool calls a day and 10 new integrations a month. Premium is $50 a month. (pricing)

  3. Chatway: live chat for your website that lets your own agent, like ChatGPT, Claude or Cursor, answer customers over MCP, webhooks or the API. Best for small teams who want an agent helping with support chat. Free tier: free forever with 1 seat, 50 conversations a month (replies through the API or MCP count toward the limit) and 30 days of chat history. (pricing page)

See every tool we've checked, sorted by what you're trying to do: browse StackDrop

🆓 Free tool of the week

Harness by Autonomous: one window for Claude Code, Codex, OpenCode and other coding agents across all your machines, each on its own branch. What's free: the desktop app is a free download for Mac and Linux. Your agents keep using your own accounts and credentials. Agent subscriptions, model usage and any rented servers are billed separately (product page, checked 2026-10-18). Still picking an AI editor to run beside it? Read Cursor vs Windsurf.

🛠️ Quick guide tip

Know where your AI keys are stored. The OpenCode incident hit Console users who had linked outside providers. Wherever your keys live, here's a quick hygiene check.

  1. In OpenCode, run opencode auth list to see which provider credentials are saved on your machine. Keys you add with /connect are stored in ~/.local/share/opencode/auth.json.

  2. In opencode.json, point to a key with {env:YOUR_VAR} instead of pasting the key into the file.

  3. If you linked provider keys in OpenCode Console, consider rotating them in each provider's own dashboard. Removing a key from a tool doesn't stop anyone who already copied it.

(OpenCode provider docs, checked 2026-10-18)

How we choose tools: how we rank · Browse every tool by use case. This issue has no affiliate links and no sponsors.

Sent by StackDrop · 13398 Tegler Drive, Ste 120 #146, Noblesville, IN 46060 · You're getting this because you subscribed at stackdrop.ai. Unsubscribe