security
12 notes tagged security in the AI agents topic. How agents are built, tuned and run: loops, harnesses, MCP, skills and coding agents, with what broke and what we measured.
- Claude Code 2.1.259 turned our Read() deny rules into a Bash tripwire
Bypass-mode sessions started stalling on 'a Read() deny rule is configured' prompts. What the harness now infers from a Bash command, why a CLAUDE.md rule couldn't stop…
- MCP authorization over SSE
A Request for Comments (RFC) detailing a comprehensive specification for implementing OAuth 2.1 authorization within the Model Context Protocol (MCP) when using…
- Secure and transparent uptime monitoring with Upptime and GitHub secrets
Discover how Dwarves Foundation uses Upptime and GitHub Actions for transparent public uptime monitoring while securely keeping tabs on internal services.
- Authorization for remote MCP servers over SSE
This guide explores implementing robust authorization for Model Context Protocol (MCP) over Server-Sent Events (SSE) transport, providing a standardized framework for…
- Tool-level security for remote MCP servers, part 1: designing role-based access control
Why remote MCP servers need tool-level access control, the security architecture, and the data model and tool registry behind role-based access.
- Tool-level security for remote MCP servers, part 2: enforcement, identity and practice
How an MCP server enforces permissions and filters data, connects to existing identity systems, and rolls out access control in practice.
- Database hardening for a trading platform
Discover how a trading platform mitigated database access risks, enhanced security, and ensured data integrity through role-based access control, network isolation, MFA,…
- Prevent prompt injection
Nowadays, Large Language Models (LLMs) have become integral to various applications. However, with great power comes great responsibility, and the rise of LLMs has…
- A holistic guide to security
A high-level overview of how to implement a holistic approach to securing your application platform.
- How I came up with our security standard
In this memo, I want to share with you my thought process behind our security guideline for Dwarves. This is a critical aspect for a software company that aims to…
- The key security mechanisms for tackling cyber threats
Learn essential cybersecurity tips from expert Hieu PC on building secure products, protecting data, and staying updated on security standards to prevent hacking and…
- Blockchain fundamentals
Blockchain breaks down the complex technology behind Bitcoin and other cryptocurrencies into simple terms anyone can understand. Learn how distributed ledgers work, why…