Whose Authority Reaches the Tools?
Deciding, server by server, whether an ADK agent on Agent Runtime calls its MCP tools as the employee or as itself: on-behalf-of tokens for one query, email sent by the backend after approval, Agent Identity for …
Tag
Series-Agent-Security-in-Practice
From an Entra Sign-In to an Agent Session
43 minutes
How an employee's Microsoft Entra sign-in reaches an ADK agent on Agent Runtime: the token checks, the session binding, who else can call …
Mapping the Agent Before Anyone Attacks It
45 minutes
A reference operations agent on Google Cloud, threat-modelled against OWASP and MITRE ATLAS, with a first control: a deny-by-default policy …