AI governance
AI Governance Best Practices for Agentic Tool Access
Organizations must inventory all deployed agents before any other security controls can work.
Greta Wexler
· 9 min read
Organizations must inventory all deployed agents before any other security controls can work.
Early interception stops tool-poisoning attacks; late filtering just documents the damage.
Attackers hide malicious instructions in tool metadata that AI agents trust automatically.
How MCP collapses the N×M integration problem into N+M through standardized roles.
Shared MCP infrastructure requires tenant isolation layers the protocol doesn't enforce by design.
Most "MCP gateway" products are not built for production scale.
Most MCP servers change their behavior after approval with no re-review required.
Rug pulls exploit the MCP protocol's lack of cryptographic signing and re-approval workflows.