Skip to content
T threat.cafe

Tag

#least-privilege

2 posts

  1. · Tobias Lindqvist-Rao · Agent artifact supply chain · on threat.cafe

    Skills inherit everything your agent can touch: scoping credentials and shell access per skill and MCP server

    A skill or local MCP server runs with the agent's environment, files and network. The working least-privilege unit is the credential and command surface each one can reach, set in sandbox, permission and server config, not in the prompt.

  2. · Constance Ibe-Whitmore · MSP and SMB channel · on threat.cafe

    Your MSP's AI agents have admin on your tenant: seven questions clients will ask, and good answers

    When an MSP's own AI agents act inside client tenants, clients will ask about scope, oversight, data flow and exit. Good answers point to evidence (an inventory, scoped credentials, logs, a tested kill switch), not to a policy PDF.