Voice-enabled generative AI is essentially a two-way conversion pipeline: speech → text lets an application understand spoken input, while text → speech turns generated responses back into audio. Azure AI Foundry provides specialized models for both inference tasks.
Know which model solves which problem:
| Task | Model type | Data flow |
|---|---|---|
| Transcription | Speech-to-text | Audio → Text |
| Speech synthesis | Text-to-speech (TTS) | Text → Audio |
A transcription model such as GPT-4o-mini-transcribe accepts audio and returns text. A TTS model such as GPT-4o-mini-tts performs the reverse and can also follow instructions affecting characteristics such as tone.
The implementation pattern is straightforward: deploy the appropriate model in Foundry → create an authenticated Azure OpenAI client → call the corresponding audio API → handle text or binary audio output. Streaming is useful for TTS because audio bytes can be consumed as they arrive rather than waiting for the complete response.
# Speech → Text
with open("speech.wav", "rb") as audio:
text = client.audio.transcriptions.create(
model="gpt-4o-mini-transcribe",
file=audio
)
# Text → Speech
with client.audio.speech.with_streaming_response.create(
model="gpt-4o-mini-tts",
voice="alloy",
input="Hello from Azure AI"
) as audio:
audio.stream_to_file("speech.mp3")
Remember the direction: Transcribe = audio in, text out. TTS = text in, audio out. The audio side is binary data, so applications must correctly read input files or stream/write generated audio.
An LLM cannot inherently access your private or newly created data. RAG (Retrieval-Augmented Generation) solves this by retrieving relevant information at runtime and supplying it as context for a grounded, citation-backed response.
Foundry IQ provides reusable knowledge bases backed by Azure AI Search. Multiple agents can use the same knowledge base, while agentic retrieval can select sources, execute searches, rank results, and return relevant content with citations.
Know the three source patterns:
| Type | How it works | Think |
|---|---|---|
| Indexed | Data is ingested, chunked, vectorized and indexed before queries | Azure AI Search, Blob, OneLake |
| Direct | Agent accesses an external source without first copying it into the search index | External/remote source |
| Real-time | Source is queried at runtime for current information | Web, remote SharePoint |
Key trade-off: indexed data gives fast, optimized retrieval; direct/real-time access favors freshness and avoids maintaining another indexed copy.
Connecting knowledge isn't enough. Effective agent instructions define three critical behaviors:
When to retrieve → e.g. always consult the knowledge base for product questions.
How to cite → require attribution to retrieved sources.
What to do when retrieval fails → say the information wasn't found rather than inventing an answer.
# Mental model — not full SDK code
agent.instructions = """
For product questions:
1. Search the knowledge base.
2. Cite retrieved sources.
3. If nothing relevant is found, say so.
"""
response = agent.run("Which tents are weatherproof?")
# Agent → Foundry IQ → source → grounded answer + citations
Remember: LLM = reasoning/generation; Foundry IQ = managed knowledge layer; knowledge base = reusable collection of sources; instructions = rules governing when and how that knowledge is used.
Model Context Protocol (MCP) standardizes how AI agents discover and invoke external tools. An MCP server publishes its available tools; an MCP client discovers them and makes them usable by an agent.
If the MCP server is remotely accessible, it can be registered directly with the Foundry agent using MCPTool.
# Define the remote MCP server
mcp_tool = MCPTool(
server_label="docs",
server_url="https://.../mcp",
require_approval="always"
)
# Give it to the agent
agent = project_client.agents.create_version(
...,
tools=[mcp_tool]
)
The agent can discover and use tools from that server. If approval is required:
for item in response.output:
if item.type == "mcp_approval_request":
approval = McpApprovalResponse(
approval_request_id=item.id,
approve=True
)
💡 Key point: Remote MCP can be registered directly with the agent. Approval can provide a control point before a requested MCP tool is executed.
A cloud-hosted agent cannot directly reach an MCP server running on your machine. Your application therefore connects to the server as the MCP client.
# MCP SERVER — expose tools
@mcp.tool()
def get_inventory(product):
return ...
# MCP CLIENT — discover & call tools
session = ClientSession(...)
tools = await session.list_tools()
result = await session.call_tool(...)
# AGENT — expose tools as functions
agent_tool = FunctionTool(...)
💡 Key point: Local MCP requires your application to perform the MCP communication. The discovered tools are exposed to the agent as FunctionTools.
Ask one question: Can the agent reach the MCP server directly?
Remote MCP: Yes → register it with MCPTool.Agent → MCPTool → Remote MCP Server
Local MCP: No → your application bridges the connection.Agent → FunctionTool → Your App → Local MCP Server
⭐ In short: Remote = agent talks to MCP directly. Local = your application acts as the bridge.
Azure Content Understanding converts unstructured documents, images, audio, and video into structured, application-ready data. The central concept is the analyzer: a reusable configuration defining how content is processed and what information is returned.
Input → Analyzer → AI processing → Structured output
An analyzer combines:
Base analyzer → modality-specific foundation, e.g. document, image, audio, or video.
Field schema → defines the information and data types to return.
Models/configuration → controls AI-powered processing.
Output → content, structured fields, grounding and confidence information.
Key distinction: the schema defines WHAT to extract; the analyzer defines HOW that schema is applied repeatedly.
Use a prebuilt analyzer when the scenario matches an existing type, such as invoice or receipt. Build a custom analyzer when application-specific fields are required.
Invoice
├─ VendorName: string
├─ Total: number
└─ LineItems: array<object>
├─ Description: string
└─ Quantity: number
Fields can use different generation methods:
extract → retrieve information from the sourceclassify → select from predefined categoriesgenerate → derive new information from the content
For example, quantities can be extracted from invoice rows while TotalQuantity can be generated from those values.
| Input | Example output |
|---|---|
| Document | Text, tables, fields, totals |
| Image/slide | Text, summary, chart data |
| Audio | Transcript, speakers, actions |
| Video | Transcript, visuals, participants, tasks |
The important pattern stays the same across modalities: define schema → build analyzer → analyze content → consume structured results.
Microsoft Foundry is the broader AI development platform; Content Understanding provides multimodal analysis capabilities within that ecosystem. Content Understanding Studio is the specialized experience for designing, testing, and evaluating analyzers.
Production applications normally use the API/SDK directly:
client = ContentUnderstandingClient(endpoint, DefaultAzureCredential())
# Build reusable analyzer
client.begin_create_analyzer(
analyzer_id="invoice-analyzer",
analyzer_definition=schema
).result()
# Analyze new content
result = client.begin_analyze_binary(
analyzer_id="invoice-analyzer",
binary_input=document
).result()
Content can be supplied as binary data or a downloadable URL, and analyzer operations typically follow an asynchronous begin_* → poll → result pattern.
Prebuilt analyzer → ready-made scenario
Base analyzer → foundation for customization
Schema → fields, types and extraction behavior
Analyzer → reusable processing configuration
Grounding → where extracted information came from
Confidence (0–1) → application decision signal
Typical decision flow:
Choose modality/analyzer → customize schema if needed → build → analyze → inspect fields → validate using grounding/confidence.
AI agents become much more powerful when they can act on external systems, not just generate answers. Custom tools let a Foundry agent use application logic, databases, APIs, calculations, and workflows.
Prompt → Agent → function_call → App executes tool → Result → Agent → Answer
A custom function tool has a name, description, and parameters. The agent uses these definitions to determine when a function is needed and what arguments to provide.
# 1. Create the agent
agent = project_client.agents.create_version(...)
# 2. Ask the agent
response = openai_client.responses.create(
conversation=conversation.id,
input="What's the weather in Zurich?",
extra_body={"agent": agent}
)
# 3. Check whether the agent wants to use a function
for item in response.output:
if item.type == "function_call":
# YOUR application executes the function
result = call_function(item.name, item.arguments)
# Return the result to the agent
send_function_result(item.call_id, result)
Key concept: the LLM does not execute your local function. It returns a function_call containing the requested function and arguments. Your application dispatches and executes it, then returns the result so the agent can continue reasoning.
| Need | Use |
|---|---|
| Local application code | Custom function |
| REST API described with OpenAPI | OpenAPI tool |
| Remote/serverless compute | Azure Functions |
| Low-code workflow | Logic Apps |
Agent = decides what to call → Application = executes it → Agent = uses the result
One prompt can trigger multiple function calls, allowing an agent to combine several operations before generating its final response.
AI agents promise to do more than answer questions—they can independently use tools, browse systems and complete multi-step tasks. But a recent incident shows why that autonomy also creates new challenges.
AI agents linked to OpenAI reportedly made more than 16,000 requests to a United Nations trade-data API while trying to discover undocumented data fields. The activity occurred over several months and resembled automated brute-force probing, although it was apparently part of attempts to complete assigned tasks rather than a conventional human-directed cyberattack.
Traditional chatbots mostly generate responses. AI agents can take actions, meaning unexpected behavior can have consequences outside the conversation.
The incident highlights an important principle for organizations deploying agents: autonomy needs boundaries. Systems should restrict which resources an agent can access, limit requests and permissions, monitor unusual behavior, and require human approval for sensitive actions.
As AI becomes more capable, the challenge is no longer simply making systems intelligent enough to complete tasks. It is also ensuring they understand—or are technically prevented from exceeding—the boundaries of those tasks.
Big goals can feel overwhelming. The solution is often not more motivation, but making the next useful action so small that it becomes easy to start. A few simple habits can help protect three important resources: attention, energy, and well-being.
Correct after the click. If you automatically open a distracting app, notice it and immediately redirect yourself to something useful. A slip doesn’t have to become a session.
Control your inputs. Check email and messages in batches instead of continuously. When possible, handle each item with a simple decision: do it, delegate it, schedule it, or delete it.
Write to think. When something feels unclear, write down: What do I know? What am I assuming? What is the next useful action?
Make the first step tiny. One sentence, one minute of walking, or one object put away can overcome the resistance to starting.
Set a caffeine cutoff. Caffeine can affect sleep for hours, so avoid consuming it too close to bedtime.
Alternate focus and recovery. Work intensely for a defined period, then take a genuine break without replacing work with another stream of notifications or content.
Create moments of awe. Occasionally step outside your immediate concerns and notice something larger than yourself.
Practice gratitude. Deliberately notice what is valuable rather than allowing problems to occupy all your attention.
Restart without self-punishment. Habits will break. What matters is returning to them.
Small actions rarely feel impressive—but repeated consistently, they can make ambitious goals manageable.
Relevant Snipps:
AI agents add an orchestration layer above an LLM: model + instructions + tools + conversation state work together in an agentic loop to complete multi-step tasks rather than simply return a response.
Application → Foundry Project → Agent → Model + Instructions + Tools
Microsoft Foundry Agent Service provides a managed runtime for conversation state, tool calling, and agent lifecycle. Agents can invoke built-in tools such as File Search for grounded retrieval and Code Interpreter for Python-based analysis, plus APIs and custom functions.
Typical flow:
Create project → Deploy model → Define agent → Configure instructions/tools → Test → Consume from application
The Foundry portal is useful for prototyping; SDK/code-based configuration improves repeatability, version control, and CI/CD.
from azure.ai.projects import AIProjectClient
from azure.identity import DefaultAzureCredential
project = AIProjectClient(
endpoint=PROJECT_ENDPOINT,
credential=DefaultAzureCredential()
)
openai = project.get_openai_client()
Project endpoint ≠ model endpoint. When working through Foundry, AIProjectClient connects to the Foundry project endpoint. The project client can provide an OpenAI-compatible client for Responses, Conversations, and related operations.
Conversation state can be server-side. Conversations are durable objects containing messages, tool calls, and tool outputs, allowing the same conversation to continue across requests.
Tools determine agent capabilities. File Search provides grounding/RAG; Code Interpreter executes analysis; custom functions/APIs allow agents to take actions.
Managed Agent Service vs. direct model API: the managed runtime handles infrastructure such as conversation management, tool execution/orchestration, and agent lifecycle, while application code operates at a higher abstraction.
Exam mental model: know what belongs to the project, agent, model, conversation, and tool layers—and which SDK/client or endpoint your application is actually targeting.
Generative AI is non-deterministic: the same system can produce unexpected or harmful outputs. Responsible AI therefore needs to be engineered into the complete application lifecycle—not added as a final check.
MAP → MEASURE → MITIGATE → DEPLOY & MONITOR ↻
| Step | Engineering focus |
|---|---|
| Map | Identify harms, attack vectors, risky inputs and misuse scenarios |
| Measure | Evaluate actual model outputs against those risks |
| Mitigate | Add multiple, layered controls |
| Monitor | Observe production behavior and feed new risks back into Map |
Think of safety as an AI request/response pipeline:
Input → UX Controls → System Prompt + Grounding → Guardrails → Model → Guardrails → Output
UX controls limit the attack surface, for example through input or conversation limits. System prompts and grounding constrain model behavior, but prompts alone are not a security boundary.
Microsoft Foundry guardrails add enforcement around the model and can intervene before input reaches the model and after output is generated. Controls can target:
Jailbreaks · Hate · Violence · Sexual content · Self-harm · Protected material · Groundedness · PII
Guardrails have configurable blocking thresholds, allowing stricter policies for higher-risk applications.
This distinction matters:
Model refusal: Request → Model → "I can't help with that."
The model received and processed the request.
Guardrail blocking: Request → Guardrail → BLOCKED ⛔ → Model
The unsafe request never reaches the model.
There is no single safety control. Combine UX restrictions, system instructions, grounding, guardrails, appropriate model selection, evaluations, and production monitoring.
Treat responsible AI like security engineering: identify → test → defend → monitor → repeat.
Microsoft 365 Copilot Chat and Microsoft 365 Copilot use the same conversational AI experience, but differ significantly in what information they can use. The easiest way to remember the distinction is web AI vs. work-aware AI.
Copilot Chat
LLM
├─ Web
└─ Files/content you explicitly provide
Microsoft 365 Copilot
LLM
├─ Web
└─ Work IQ
└─ Microsoft Graph
├─ Emails
├─ Teams chats & meetings
├─ OneDrive / SharePoint files
└─ People & organizational context
With a Microsoft 365 Copilot license, Work IQ lets Copilot reason over work information the user is permitted to access. Without that license, Copilot Chat is primarily web-grounded, although uploaded files and some app-specific experiences can provide additional context.
| Copilot Chat | Microsoft 365 Copilot | |
|---|---|---|
| AI chat | ✓ | ✓ |
| Web grounding | ✓ | ✓ |
| Uploaded files | ✓ | ✓ |
| Full work-data grounding | Limited | ✓ |
| Emails, chats, meetings | Limited | ✓ |
| Advanced agents | Limited | ✓ |
| AI access | Standard | Priority |
Copilot Chat is included with eligible Microsoft 365 subscriptions, while Microsoft 365 Copilot requires an additional license.
Mental model:
Copilot Chat → AI assistant for work
Microsoft 365 Copilot → AI assistant that understands your work context
Getting better results from a generative AI model does not automatically mean fine-tuning it. The key is identifying what is wrong with the output and choosing the least complex technique that solves it.
| Problem | Technique | Why |
|---|---|---|
| Instructions, tone or output format | Prompt engineering | Fastest and simplest |
| Missing or external knowledge | RAG | Retrieves relevant information at runtime |
| Consistently wrong behavior/style | Fine-tuning | Changes how the model responds |
| Knowledge + behavior problems | RAG + fine-tuning | Both may be required |
Start with prompt engineering. System instructions can define the model's role, constraints, tone and expected output. Examples and few-shot prompting can further improve consistency.
Retrieval-Augmented Generation is appropriate when the required information is too large, specialized or dynamic to include directly in the prompt:
Question → Vectorize → Retrieve relevant chunks → Question + context → LLM → Answer
The important distinction is that RAG does not retrain the model. Relevant external information is retrieved and added to the model's context at runtime.
Fine-tuning trains a base model using many examples of desired input/output behavior. A supervised dataset commonly contains conversations such as:
{"messages":[
{"role":"user","content":"Suggest a destination."},
{"role":"assistant","content":"Absolutely! What kind of trip interests you?"}
]}
Microsoft Foundry supports different customization methods depending on the selected model, including supervised fine-tuning and Direct Preference Optimization (DPO). Model and region must support the chosen method.
Key distinction: Fine-tuning is comparatively expensive and time-consuming, produces a new fixed model that must be deployed, and must be repeated when training requirements change.
Prompt → instructions. RAG → knowledge. Fine-tuning → behavior.
When uncertain, try prompting first, use RAG for missing knowledge, and reserve fine-tuning for behavior that prompting cannot reliably achieve.
Generative AI models are powerful, but their trained knowledge is limited. Tools extend models beyond text generation, allowing them to access real-time information, take actions, ground responses in facts, extend functionality, and build intelligent workflows.
| Tool | Purpose |
|---|---|
code_interpreter |
Generate and run code for calculations and data analysis |
web_search |
Find current information on the internet |
file_search |
Search files and ground responses in specific knowledge |
function |
Call custom functions implemented by your application |
Remember: current information → web_search · uploaded/private documents → file_search · calculations/code → code_interpreter · application-specific actions → function
Tools are provided through the tools collection. The model can determine which available tool is appropriate for a request.
response = client.responses.create(
model=model_name,
input="Answer the user's request using the available tools.",
tools=[
{"type": "code_interpreter", "container": {"type": "auto"}},
{"type": "web_search"},
{"type": "file_search", "vector_store_ids": [vector_store.id]}
]
)
print(response.output_text)
Core flow: User → Responses API → Model → Tool → Result → Model → Response
For file_search, documents are stored in a vector store and prepared for semantic retrieval:
Files → Chunking → Embeddings → Vector Store → Retrieval → Model
This lets the model answer using relevant document content rather than relying only on its trained knowledge. Uploaded company policies or private documents → File Search + Vector Store.
Functions are different because the application executes the function, not the model. The model identifies the required function and returns a function-call request:
User → Model → Function Call → Application → Function → Result → Model → Response
The application executes the requested code and returns its result. This process can run in a loop when multiple tool calls are needed.
Key distinction: built-in tools extend the model with predefined capabilities; function calling connects the model to your own application logic and actions.
A chat application becomes much easier to design once you understand three decisions: which endpoint to use, which API to call, and where conversation state is maintained.
| Choice | Remember this |
|---|---|
| Azure OpenAI endpoint | Direct model access; typically use the OpenAI SDK |
| Foundry project endpoint | Higher-level access to models, tools, and agents |
| Chat Completions API | Client resends the conversation history |
| Responses API | Can link turns using a previous response ID |
Key concept: LLMs are inherently stateless. Chat history must therefore be supplied or referenced. With Chat Completions, your application maintains and resends the message array. With Responses, server-side context can be continued by passing the previous response identifier.
response = client.responses.create(
model="my-deployment",
instructions="You are a helpful assistant.",
input=user_input,
previous_response_id=last_response_id
)
print(response.output_text)
last_response_id = response.id
For authentication, prefer Microsoft Entra ID over embedded API keys. DefaultAzureCredential is useful because the same application code can obtain credentials across local development and Azure-hosted environments.
Also know the configuration controls: temperature influences response variability, while max tokens constrains output size.
For applications performing other I/O while waiting for model responses, use the asynchronous client + await to avoid blocking execution.
Remember: responses.create() generates a response; response.output_text retrieves its text; response.id can connect the next turn.
Choosing a model is more than picking the most capable option. In Microsoft Foundry, the practical lifecycle is Select → Deploy → Evaluate: balance model capability, performance, cost, data-location requirements, and measured output quality.
Use the Model Catalog and Leaderboard to narrow candidates by capabilities, supported languages, context window, fine-tuning support, and benchmarks.
| Benchmark | What it tells you |
|---|---|
| Quality | Usefulness and overall response quality |
| Safety | Susceptibility to harmful or adversarial inputs |
| Throughput | How quickly the model processes and returns output |
| Cost | Price based on input/output token usage |
Key trade-off: a larger model may deliver better results, while a smaller model can offer higher throughput and lower cost.
Know these deployment choices:
Global → broadest capacity and potentially highest throughput
Data Zone → processing stays within a geographic zone such as the EU or US
Regional → maximum control over the processing region, but capacity is constrained to it
Standard → usage/token-based; suitable for general workloads
Provisioned → predictable, guaranteed throughput
Batch → high-volume, non-interactive processing where latency is less important
Developer → lightweight testing of fine-tuned models
Remember: Global Standard is the general-purpose choice highlighted for obtaining the largest available quota.
Model performance isn't just speed. Evaluate quality, relevance, fluency, and groundedness.
Manual evaluation: run representative prompts and edge cases against models side-by-side.
Automated evaluation: use a larger prompt dataset, expected behavior, and evaluators to systematically score responses and safety.
High-value distinctions to remember:
Throughput = speed/capacity of responses · Fluency = natural, linguistically correct output · Groundedness = whether responses align with known information
Mental model:Requirements → Catalog/Benchmarks → Deployment → Test Dataset → Evaluators → Compare → Improve
An LLM can identify entities or PII itself—but an agent can instead delegate these tasks to a specialized Azure Language tool through MCP. This separates agent reasoning from deterministic NLP processing.
Architecture: Prompt → Agent → discover/select MCP tool → Azure Language → tool result → final response
Azure Language MCP Server exposes Azure Language capabilities as tools that an agent can dynamically discover and invoke. Core capabilities include PII detection, language detection, and Named Entity Recognition (NER); additional Language capabilities are also exposed through MCP.
The important distinction is:
Agent/LLM: reasons about the request and chooses an appropriate tool.
MCP: standardizes tool discovery and invocation.
Azure Language: performs the specialized NLP operation.
Tool selection is not hard-coded. The MCP server advertises available tools and their descriptions; the agent matches the user's intent to those descriptions. Good agent instructions further guide when Azure Language should be used.
# Agent is already configured with Azure Language MCP
response = openai_client.responses.create(
input="Find and redact PII in this text...",
extra_body={"agent": {"name": "text-agent"}}
)
print(response.output_text)
Behind this simple call:
Agent
└─ discovers MCP tools
└─ selects PII tool
└─ Azure Language analyzes text
└─ result returns to Agent
Watch for approval: MCP tool calls can require user/application approval. Either handle the approval request in code or configure appropriate tools for automatic approval.
Remember: MCP exposes tools; the agent selects them; Azure Language executes the NLP task.
Before building an AI application or agent, understand how Microsoft Foundry organizes models, tools, knowledge, and development resources. These relationships form the foundation for everything that follows.
Think of the structure as:
Foundry Resource → Project → Models + Agents + Tools + Knowledge
The Foundry resource is the underlying Azure resource and infrastructure boundary. A project lives within that resource and organizes the models, agents, tools, and knowledge used by an AI solution. The resource is the foundation; the project is the development workspace.
Microsoft Foundry provides access to generative models alongside Foundry Tools for specialized AI capabilities such as Language, Speech, Translation, and Document Intelligence. These services complement models when an application needs capabilities such as speech recognition or structured information extraction.
| Need | Typical choice |
|---|---|
| Direct model/chat interaction | OpenAI SDK |
| Agents, tools and grounding | Microsoft Foundry SDK |
| Specialized AI capability | Service-specific SDK |
| Universal HTTP integration | REST API |
Key distinction: use the OpenAI SDK when targeting a model directly; move toward the Foundry SDK when working with the broader agentic platform, including tools and grounding.
For development, Visual Studio Code with the Microsoft AI Toolkit is the recommended combination presented in the course. In the Foundry portal, Discover is primarily for finding models, tools and templates, while Build is where deployed resources are configured and tested.
Fairness • Reliability & Safety • Privacy & Security • Inclusiveness • Transparency • Accountability
These are not an afterthought: they influence grounding, prompts, guardrails, UX, evaluation, and ongoing operation of the solution.
Memory model: Resource hosts → Project organizes → Model reasons → Knowledge grounds → Tools act → Responsible AI governs.
Building an AI solution goes beyond calling a model. The focus is on creating production-ready AI applications and agents with Microsoft Foundry that can use enterprise data, interact with tools, process different content types, and collaborate to complete real tasks.
| Area | What you should understand |
|---|---|
| Generative AI apps | Build conversational applications using models, APIs, and SDKs |
| Grounding | Connect models to your own data for relevant, fact-based responses |
| Agents + tools | Let agents retrieve information and take actions |
| Multi-agent systems | Orchestrate specialized agents to collaborate on workflows |
| Multimodal AI | Process text, documents, vision, and speech |
| Production | Deploy, publish, monitor, secure, and apply responsible AI safeguards |
Exam focus: Understand not just what these capabilities do, but when and why you would use them together in an Azure AI solution.
A useful mental model for AI-103 is:
User → AI App/Agent → Model → Data + Tools → Action/Response
For more complex solutions:
User → Orchestrator → Agent A + Agent B + Agent C → Tools/Data → Result
An agent therefore isn't simply a chatbot. It combines a model's reasoning capabilities with instructions, knowledge, and tools so it can perform useful work.
The course assumes working knowledge of Python, REST APIs/SDKs, Azure fundamentals, and generative AI concepts. Hands-on practice is important: build applications in Microsoft Foundry, connect models to data, add tools to agents, experiment with multimodal inputs, and create multi-agent workflows.
Key takeaway: Think beyond prompts and models. AI-103 is about assembling the components required for an end-to-end AI solution:
Models → Grounding → Tools → Agents → Orchestration → Production
AI safety is no longer only about what future systems might be capable of. New reports show that people are already trying to use advanced AI for potentially harmful activities.
Anthropic says it has detected and disrupted attempts to misuse its Claude models across several areas, including cyberattacks, surveillance, influence operations and potentially dangerous biological research.
AI can make such activities easier by helping users analyze information, write code, coordinate tasks and automate parts of complex workflows. More capable AI agents could increase this effect by performing multiple steps with less human involvement.
The findings do not mean AI systems are independently launching attacks. They show a different challenge: powerful general-purpose tools can amplify the capabilities of people who misuse them.
For AI providers, businesses and governments, safeguards will increasingly need to combine technical restrictions, monitoring, security testing and human oversight.
APIs and MCP are not competing technologies—they solve different parts of the integration problem.
APIs do the actual work. They let software communicate with services, databases, and other systems. With AI applications, the model itself does not call an API; it chooses an action, while software outside the model executes it.
MCP adds a standardized layer around this process. An MCP server can expose useful actions—such as reading messages or creating tickets—while handling the underlying API calls, authentication, formats, and other implementation details.
This makes integrations easier to discover and reuse across multiple AI applications instead of rebuilding them for each one.
When to use which?
Direct APIs: Simple applications, experiments, or a small number of known operations.
MCP: Multiple AI applications sharing tools and systems.
In short, MCP does not replace APIs. It provides a common, reusable way for AI applications to access the capabilities behind them.
Original video: MCP vs API Explained: Do You Really Need MCP? (en / 17:17) - KodeKloud (YouTube)
larly relevant:
When was the lawn last fertilized? Which month was the hedge trimmed? And what work was done in the garden last autumn? Small details like these are surprisingly easy to forget.
Keeping a record of garden tasks makes it much easier to look back and plan future work. The challenge is finding a structure that is simple enough for everyday use while remaining organized over several years.
A practical approach is to organize the records hierarchically in a note-taking application:
The Garden Chronicle serves as the long-term archive, while each Garden Log contains the records for a particular year.
A simple table works well for the individual entries:
| Date | Task | Notes |
|---|---|---|
| 09 Sep 2026 | Mowed the lawn | Cutting height recorded |
| 15 Sep 2026 | Fertilized the lawn | Autumn fertilizer |
| 03 Oct 2026 | Pruned shrubs | Seasonal pruning |
The Notes column is particularly useful for recording products, quantities, plant varieties, weather conditions, or observations.
With very little effort, this creates a useful garden history that can support future planning and make recurring seasonal tasks easier to track.
Have dozens of tabs open in Brave and want to save them before closing the browser? A simple bookmark export provides an easy backup without installing extensions or running scripts.
First, press Ctrl + Shift + D in Brave. This bookmarks all tabs in the current window and places them together in a folder. Give the folder a recognizable name, such as Open Tabs Backup.
Next:
Open Brave’s Bookmark Manager by entering brave://bookmarks/ in the address bar.
Select the three-dot menu in the upper-right corner.
Choose Export bookmarks.
Select a location and save the resulting .html file.
The exported HTML preserves bookmark titles and URLs, making it useful as a portable backup. It can also be opened in a browser or imported into compatible browsers later.
One limitation is worth knowing: Brave exports the complete bookmark collection, not only the temporary folder containing your open tabs.
Closing a notebook in OneNote does not delete it. Cloud-based notebooks are stored in services such as OneDrive or SharePoint, so permanent deletion must happen at the storage location.
Close it in OneNote. This removes the notebook from the app but leaves its data untouched.
Open OneDrive or SharePoint and locate the notebook in its actual storage location.
Delete the complete notebook rather than individual sections.
Check the recycle bin. A normally deleted notebook remains recoverable until it is removed from the recycle bin or the retention period expires.
Empty the recycle bin if you want to remove it immediately from your accessible storage.
Microsoft 365 business and SharePoint environments may have additional recycle-bin stages or organizational retention policies. These can preserve deleted information even after a user empties the recycle bin.
The key distinction is simple: closing removes a notebook from OneNote; deleting removes it from cloud storage. For permanent removal, always check the underlying storage and its recycle bin.
Europe’s AI ambitions just received a major financial boost. French AI company Mistral has raised €3 billion, giving it a valuation of about €21 billion ($24 billion) and marking the largest equity funding round by a privately owned European technology company.
Mistral develops large AI models and competes in a market dominated by much larger American companies. The new capital is expected to support further model development, computing infrastructure and international expansion.
The investment also has a broader European dimension. Governments and businesses increasingly want greater choice over where their AI technology and data come from. A strong European AI provider could offer another option alongside major US and Chinese platforms.
The enormous investment required to develop advanced AI is concentrating the industry around companies capable of accessing substantial computing power and capital.
Mistral’s latest funding shows that Europe is trying to remain part of that race—not simply as a customer for AI developed elsewhere, but as a producer of its own technology.
The service brings together the key capabilities needed to build and run AI agents without having to manage every technical detail yourself:
With GPT-6 Astra, artificial intelligence is taking another step toward greater autonomy. OpenAI’s new model is designed not only to provide better answers, but also to carry out complex tasks on a computer with less human guidance.
From chatbot to digital worker
Instead of specifying every individual step, users can increasingly define the desired outcome. Astra can then plan and execute multiple steps to reach that goal.
Tasks can include:
More capabilities also mean more risks
Cybersecurity is particularly important. Astra is the first OpenAI model to reach the company’s “Critical” level for cybersecurity capabilities. With suitable tools and permissions, it can potentially discover previously unknown security vulnerabilities. OpenAI has therefore introduced additional safeguards and monitoring systems.
Why it matters
The development highlights a broader shift in AI: from conversational assistants toward systems that can take action. As these systems become more autonomous, clear permissions, strong security controls, and human review become increasingly important.
The AI boom has an unexpected side effect: smartphones and computers are getting more expensive. The reason lies in components found in almost every modern device — memory chips.
AI data centers require enormous amounts of high-performance memory. Manufacturers are therefore dedicating more production capacity to lucrative memory products for servers and AI systems. This leaves less capacity for conventional DRAM and NAND memory used in smartphones, laptops, and SSDs.
The effects are becoming noticeable:
Gartner expects average PC prices to rise by 17% and smartphone prices by 13% in 2026 compared with 2025.
TrendForce forecast further increases in DRAM and NAND contract prices for the third quarter of 2026.
Budget devices are particularly affected because memory represents a larger share of their manufacturing costs.
Manufacturers may respond with higher prices, smaller product ranges, or more conservative memory configurations.
For consumers, this could also change buying habits. Devices may be kept for longer, while used and refurbished smartphones and computers become more attractive.
AI is therefore changing more than software and the workplace. The global infrastructure required to power it is increasingly influencing the price of everyday electronics.
The race to build AI that is both fast and highly capable may be getting more interesting. Google is reportedly preparing Gemini 3.8 Flash, an AI model designed to significantly improve coding performance.
Google’s Flash models are intended to provide a faster, more efficient alternative to its largest AI models. According to reports, Gemini 3.8 Flash has been tested internally with a strong focus on software development.
In Google’s internal coding environment, engineers reportedly preferred the upcoming model over Anthropic’s Opus in some comparisons. However, these are internal evaluations, not independent benchmarks, so real-world performance remains to be verified.
The development points to an important AI trend: smaller, faster models are becoming increasingly capable.
For users, this could eventually mean sophisticated coding assistants and AI agents that respond quickly while requiring fewer computing resources. But until Google officially releases the model and publishes specifications or benchmarks, its exact capabilities remain uncertain.
Artificial intelligence is usually associated with chips, software, and computing power. But behind the AI boom lies an even more fundamental resource: energy. As data centers become larger and more numerous, electricity generation, power grids, and reliable supply are becoming increasingly important.
Expanding digital infrastructure affects an entire supply chain:
Power generation: Data centers require large amounts of electricity, often around the clock.
Power grids: Additional generation capacity has limited value if the grid cannot deliver enough electricity where it is needed.
New energy sources: Alongside renewables, nuclear power is receiving renewed attention, including small modular reactor concepts.
Data centers: Cloud and AI providers increasingly need to consider where sufficient electricity and grid capacity are available.
The key point is simple: regardless of which AI company or chipmaker ultimately succeeds, digital services need energy. Expanding electricity infrastructure could therefore become one of the foundations for further growth in AI and cloud computing.
For businesses and society, this changes the perspective on the AI boom. Progress will not depend solely on better models and faster processors, but increasingly on power plants, electricity grids, energy storage, and available grid capacity.