mcp

1 post · all tags

  • Threat Modeling an Agent's Tool Belt

    Everyone wants to threat model the model. Wrong altitude. The model is a text generator that has never touched your infrastructure. What touched it was the bash tool you handed over three sprints ago.

    An agent’s attack surface is exactly the union of its tools’ capabilities. Nothing more, and — this is the part teams forget — nothing less, including the capabilities that emerge only when two innocuous tools are combined.