MCP Security Threat Model for Production Systems
A practical threat model for MCP hosts, clients, servers, tools, credentials, model context, and downstream systems.
AI Agent Knowledge Library
Security & Safety
Prompt injection defense, permissions, authentication, authorization, sandboxing, guardrails, and safe agent operation.
9
Published resources
Editor’s pick
Start with this guide
Knowledge library
Latest resources
9 published articles
MCP Tool Permissions and Least Privilege
A practical permission model for controlling which MCP tools users and agents can discover, call, and approve.
MCP Prompt Injection, Tool Poisoning, and Data Exfiltration
A defensive guide to prompt injection, tool poisoning, confused-deputy risks, and data exfiltration in MCP systems.
MCP Authentication and Authorization Explained
A production-focused guide to authenticating MCP clients and authorizing users, tools, resources, tenants, and downstream actions.
Human-in-the-Loop for AI Agents
A practical, production-oriented explanation of human-in-the-loop control, with examples, boundaries, trade-offs, and failure handling patterns.
Sandboxing AI Agents
A practical, production-oriented explanation of sandboxed agent execution, with examples, boundaries, trade-offs, and failure handling patterns.
Tool Permissions and Least Privilege for AI Agents
A practical, production-oriented explanation of least-privilege tool permissions, with examples, boundaries, trade-offs, and failure handling patterns.
Prompt Injection in AI Agents
A practical, production-oriented explanation of prompt injection in tool-using agents, with examples, boundaries, trade-offs, and failure handling patterns.
AI Agent Security Explained
A practical, production-oriented explanation of the security model of an AI agent, with examples, boundaries, trade-offs, and failure handling patterns.