# AI agent and MCP security: constrain the tool, not just the prompt

Source: https://www.web3sec.news/blog/ai-agent-mcp-security-runbook
Updated: 2026-11-08

Assign owners and record supporting evidence in your team's own system.

- [ ] Inventory tools, server transports and execution identities.
- [ ] Review local server code and its operating-system access.
- [ ] Scope authorization by resource, user and operation.
- [ ] Test injections against blocked outcomes using dummy data.
- [ ] Maintain an independent kill switch and action audit trail.

## References
- [MCP: security best practices](https://modelcontextprotocol.io/docs/draft/tutorials/security/security_best_practices)
- [MCP: authorization specification, draft](https://modelcontextprotocol.io/specification/draft/basic/authorization)