MCP · 9 min · Oct 29, 2026
Agent Security
The Log Sees the Token, Not the Hand
At 2 a.m., the team's agent opened a public pull request full of private code. GitHub says Dana opened it. Dana was asleep.
Read →Anatomy
“The config is the permission grant.”
Teardowns of real configurations. What they grant, and the line you would change.Not tutorials.
CI · 7 min · Sep 8, 2026
Cloud Security
The Org Can Assume Prod
You took the access key out of the pipeline. The trust policy still says any repo in the org can become the prod role. That is the same grant with a nicer name.
Read →MCP · 7 min · Aug 25, 2026
Agent SecurityData Security
Sites.Read.All Is the Index
You connected the agent to SharePoint. You did not review the Graph permission the app was granted. Application Sites.Read.All is a tenant crawl, not a search box.
Read →MCP · 6 min · Aug 11, 2026
Agent Security
The Key in the Env Block
You reviewed the system prompt. You did not review the access key the MCP server loads on start. That key is the permission grant.
Read →