Topic · 5 posts
Authorization
Deciding what an autonomous agent may do, and enforcing it before the tool call rather than reviewing the log after.
- 45% of AI Agents Share the Same API Key. Here's Why That's a Fire Waiting to Happen.
Nearly half of teams give every agent the same credential. That costs you attribution, blast radius control, and least privilege all at once.
- A Cursor Agent Deleted a Production Database in 9 Seconds. Here's Why Pre-Action Authorization Would Have Caught It.
A Cursor agent deleted PocketOS's production database and every backup in nine seconds. The same authorization gap runs through every agent incident of 2026.
- A payment request is not a policy decision: 4,371 human attacks, 14 models, one question
We replayed 4,371 human-written attacks against 14 models, with and without an authorization check between the tool call and the bank. The models kept asking to pay. What changed is whether the money moved. Charts, denominators and a reproduce command.
- What Mastra Gets Right About Agent Authorization, and What It Doesn't Yet
I built an adapter that checks every Mastra tool call against a policy before it runs, and found out where every agent framework leaves the same hole.
- 63% of Organizations Cannot Purpose-Limit Their AI Agents. Vercel Showed Us Why That Ends.
Disclosure: I build APort, an open-source layer that checks each AI agent action against a policy before it runs. The Vercel breach ran on an OAuth grant an AI tool already held, and 63% of organizations still cannot purpose-limit an agent or shut one down.