AI Security
How do MCP tool approvals work when an assistant task runs unattended?
Unattended tasks cannot click Allow. How tool approvals behave in scheduled runs, which tools still stall, and how to add a guardrail layer.
Oct 19, 20266 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedAI Security
Should MCP tool allowlists differ for dev, staging and production?
Yes. Use a looser MCP tool allowlist in dev and a tight one in production, with promotion steps between. A table of what to allow where, with checks.
Oct 19, 20264 min read
AI Security
Do MCP servers in a cloud agent sandbox bypass your egress rules?
Sandbox firewalls may not cover MCP server processes or connector traffic. How to find that gap and close it for cloud coding agents that use MCP tools.
Oct 19, 20266 min read
AI Security
What MCP authorization checks should a buyer expect from security tooling?
Buyers should expect security tooling to help spot MCP servers that skip token audience checks, pass tokens through, or put tokens in URLs. What to ask.
Oct 19, 20264 min read
AI Security
What do MCP and AI agent terms mean? A plain English glossary of 20
Twenty MCP and AI agent terms defined in plain English, from agent and tool call to prompt injection and guardrail, grouped so you can learn them in order.
Oct 19, 20268 min read
AI Security
Are these MCP and AI agent security myths true? Eight myths vs facts
Eight common beliefs about MCP and AI agent security, checked against OWASP, NIST and the MCP specification, with what to do about each one.
Oct 19, 20268 min read
AI Security
How do you map the OWASP LLM Top 10 to questionnaire answers?
Use the OWASP LLM Top 10 as a checklist for AI assistant and MCP answers: for each risk, one sentence on exposure, one control, one piece of evidence.
Oct 19, 20263 min read
AI Security
Local or remote MCP for security tools: which should you choose?
Local MCP servers run on a laptop with your privileges, remote ones run on the vendor side. A decision guide for security tools, with a comparison table.
Oct 19, 20266 min read
AI Security
Local or hosted AI coding agent: where does your code actually go?
Local agents still send context to a model service, and hosted agents run your code in someone else's environment. Know both data paths before you choose.
Oct 19, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.