you are viewing a single comment's thread
view the rest of the comments
[–] 1 point 6 hours ago (1 child)

Aparently, the current train of thought is to make the agent do everything through MCP and watch that MCP like made with more AI and exacting rules. As soon as the agent tries to drop the DB without making a backup, the MCP rejects it as too dangerous (or whatever rules you set up in the MCP)

  • source
  • parent
  • hideshow 1 child comment
  • [–] 3 points 1 hour ago

    Yeah, I recently attended a session at a conference where they were discussing the challenges with MCP, and with RBAC for AI more generally.

    Two things stand out to me:

    1. MCP helps mediate the side-effects the agent requests, which is great… but it needs to return information to the agent, and if you can manipulate the content of the response then the MCP just becomes another vector for prompt injection.
    2. RBAC generally covers a matrix of actions + resources, but it can be hard to preconfigure resource identities because the agent can invent identifiers on the fly. It can’t modify the firewall on a named resource? Okay, it can make a new one with more lax permissions, and move existing infra over to the new one!
  • source
  • parent