UseAI glossary
Least privilege
Give an agent only the tools strictly necessary for its mission, read-only by default. Whoever reads incoming emails doesn't need the right to send them, and this single rule prevents most disasters.
In other words
The new employee's badge only opens the doors to their department. Not out of distrust, but by design.
Alyriaz articles that mention it
- How do you monitor thirty thousand agents?
Monitoring agents that act continuously requires a precise technical setup. We explain how this control layer works, what it catches and what it lets through.
- Giving an agent access to your accounts, without giving everything away
Granting an agent access is both necessary and risky. We explain the principles of least privilege as applied to AI agents, and the concrete settings to check.
- Tools that give agents access to files are becoming the new target
Vulnerabilities targeting the tools that give agents access to files and execution have been published. We explain why this layer has become a prime target.
- AI agents are leaving the demo stage and entering production.
Several recent announcements point in the same direction: AI agents are moving from prototype to real-world deployment, complete with the supervision and security tools that entails. We analyse what this wave of announcements reveals.
- What is MCP? The protocol that lets an AI plug into your tools
The Model Context Protocol has become the standard enabling AI models to connect to external tools and data sources. We explain what it does, why it was adopted so quickly, and the security questions it raises.
- Agentjacking: the flaw that turns your code assistant against you
An attack dubbed Agentjacking, disclosed in June 2026, traps AI coding agents by injecting fake instructions into error reports. 85% success rate, 2,388 organisations affected. We explain how it works and how to protect against it.