// BLOG

Insights & Updates

Technical deep-dives on AI agent security, spending controls, and the future of autonomous payments.

Browse by topic →
// FEATURED

The NSA just made the case for a policy layer in front of MCP

The NSA published 17 pages on MCP security. We map every recommendation to where enforcement actually happens: the call path between agent and tool.

mcpsecuritynsapolicy

MCP Authentication: Securing How Agents and Servers Connect

mcpsecurityguide

MCP Authorization: Scoping What Agents Are Allowed to Do

mcpsecuritypolicy

MCP OAuth: Connecting Agents to Protected Servers

mcpsecurityguide

Stop Your GitHub MCP Agent From Force-Pushing to main

mcpsecuritypolicy

Blocking Outbound Exfiltration Through MCP Fetch and HTTP Tools

mcpsecuritypolicy

Cap LLM Token Spend on MCP Agents: Cost-Scaled Limits Beyond Call Counts

mcpsecuritypolicy

Namespace-Scope Your Kubernetes MCP Server From Production

mcpsecuritypolicy

Sandbox Your Shell-Exec MCP Server With Command Allowlists

mcpsecuritypolicy

Slack MCP Channel Allowlists: Stopping Agents Posting to #general

mcpsecuritypolicy

X Just Shipped an MCP Server. It Exposes 131 Tools With Zero Access Control.

securitymcpx

We Scanned Popular Open Source MCP Configs. Here's What We Found.

securitymcpscan

One Tool Call Away From a $10,000 AWS Bill

tutorialmcpaws

Your AI Agent Can Delete Every Container on Your Machine

tutorialmcpdocker

Preventing Your AI Agent From Messaging #general

tutorialmcpslack

Secure Your Stripe MCP Server: Rate Limits and Spending Controls

tutorialmcpstripe

One Command to Policy-Enforced Agents: Introducing the CLI Init Tool and MCP Server

featureannouncementmcp

Will AI Ever Be Good Enough to Not Need Spending Limits?

securityopinion

x402 Policy Enforcement: How to Add Spending Limits to HTTP 402 Payments

x402featureannouncement

Know Your Agent (KYA): Cryptographic Identity for AI Agents

compliance

Agentic Finance: The $30 Trillion Opportunity Nobody is Ready For

Non-Custodial Security: Why We Don't Want Your Keys

security

Stablecoin Payroll: How to Automate Payouts without Risking the Vault

enterprise

The Anatomy of a Wallet Drain: How One Logic Loop Cost $100k

securitycase-study

Why Prompt Engineering is NOT Security: The Case for Policy Engines

security

Coinbase SDK + PolicyLayer: The Ultimate Stack for Safe AI Agents

coinbasetutorial

The Binary Permissions Problem: Why Traditional Wallets Fail AI Agents

security

Multisig vs Policy Layers: Which Approach Secures AI Agents Better?

architecturesecurity

SOC 2 Compliance for AI Agents: Audit Trails, Access Controls & Monitoring

complianceenterprise

How to Add Spending Limits to CrewAI Agents

crewaitutorial

ERC-20 Approval Attacks: Why AI Agents Are the Perfect Target

ethereumsecurity

Policy Enforcement Latency: Real-World Benchmarks

architecture

How to Add Spending Limits to AutoGPT Agents

autogpttutorial

Securing Solana AI Agents: A Developer Guide

solanatutorial

Custodial vs Non-Custodial: The Key Architecture Decision for AI Agent Wallets

architecturesecurity

X402 Protocol Security: Stop AI Agents Draining Your Wallet

x402security

How to Prevent AI Agents from Draining Crypto Wallets

security
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.