Resource Indicators Bound Agent Credentials
OAuth resource parameters help ensure a token issued for one tool cannot be replayed at another.
AgentCollusionAI security startupNews
News.
Product updates, research, and original films. Follow what we build and what we learn about systems of agents.
Tool Descriptions Are Part of the Attack Surface
Agents often choose tools from natural-language metadata that can redirect plans before any protected call occurs.
MCP Discovery Needs Issuer Validation
Discovering an authorization server is useful only if the client can prove it belongs to the intended protected resource.
MCP Deprecations Change Security Assumptions
When protocol features move or disappear, monitoring and authorization designs built around them can silently weaken.
Stateless MCP Moves State Into the Evidence Layer
Removing transport sessions improves scalability but forces systems to preserve task and principal continuity elsewhere.
Task Cancellation Is a Security Control
Cancellation is not merely user experience; it is the mechanism that limits an autonomous plan after risk changes.
Tool Outputs Need Provenance Before Reuse
An agent may treat a tool result as fact even after it has crossed servers, summaries, memories, and other agents.
Intent Mandates Do Not Prove Fair Ranking
A purchase can satisfy the user’s signed limits while the recommendation process remains biased or coordinated.
A Cart Mandate Secures the Checkout, Not the Market
Final-step approval protects transaction intent while leaving earlier discovery and persuasion open to manipulation.
Agentic Procurement Can Hide Bid Coordination
Supplier agents can submit individually reasonable bids that preserve a coordinated market outcome over time.