Colin Reyes

MCP agents multiply identity risks faster than legacy security tools can manage them.

Existing financial regulations apply to AI agents but weren't designed to handle them.

Dynamic tool discovery breaks static permission models designed for fixed resource inventories.

Adversarial fine-tuning can slip past Claude's Constitutional Classifiers entirely.

Most MCP servers still use static keys instead of OAuth, creating widespread security risk.

Agents juggling multiple roles create governance gaps MCP doesn't solve.

Design decisions made in week one determine whether multi-agent systems fail or scale.

Language models make security decisions about tools that firewalls and code scans cannot detect.

How Anthropic embedded reasoning into AI safety rules instead of just listing constraints.

A breakdown of five threat domains where autonomous AI agents lose control.

Autonomous AI agents face a qualitatively different threat landscape than single-turn models.

A working methodology for testing tool-calling agents against four distinct threat classes.

Enterprises must govern AI agents before shadow deployments outpace security controls.

Anthropic's integration protocol scales fast, but security wasn't designed in.

Tool calls execute with real credentials, creating exfiltration risks keyword filters cannot detect.