Insights, updates and best practices for securing AI agents, workflows and MCP.
Learn how restricted sessions apply security by design to the agentic risk model, limiting data exfiltration and unsafe actions in AI agents.
AI agents need access to sensitive systems, but they should not need the credentials behind them. This article compares common credential approaches and explains how OAuth and gateways can keep secrets outside the agent while enforcing identity, policy, and audit at the point of action.
Enterprise AI agents are repeating the Hugging Face breach patterns on developer endpoints right now. A study of 100k agent sessions revealed thousands of cases of autonomous credential hunting, indirect prompt injection via Jira/Confluence, and unsupervised production changes. Learn why agentic security requires continuous session monitoring, input guardrails, and brokered credentials.
When we launched MCPTotal, we were doing exactly what the name implied: trying to make sense of the MCP explosion—hosting MCP servers, running them securely, cataloging servers, scanning for vulnerabilities, etc. MCPTotal reflected this, we always knew the name was temporary. However, the way organizations use AI has evolved quickly, ...
Read More
From this article, you learn how the explosive growth of AI agents, MCP servers, plugins, and skills is creating an entirely new cybersecurity challenge for enterprises. It explains why MCP adoption is accelerating across organizations, why traditional endpoint security tools are no longer enough, and how risks such as malicious open-source packages, exposed API keys, and prompt injection attacks are expanding the enterprise attack surface. The article also introduces Autonomous Security, a new enterprise tool that provides visibility, guardrails, and real-time protection for AI agents without slowing productivity, helping organizations securely scale AI adoption while maintaining governance and control.
This guide provides a practical checklist for compliance teams to ensure MCP and AI integrations drive innovation without compromising business privacy or security.
In this post we're talking about the fact that the agentic and MCP layer is a blindspot to security teams and how to avoid it.
In this post, we discuss one of the most critical issues surrounding MCP servers: their role as an additional supply-chain attack vector.
In this post we're talking about how MCPTotal manages to redirect all traffic of a sandboxed MCP server into your private network to connect to localhost, staging or production environments in a robust way.