AI
MCP security checklist for enterprises
An enterprise MCP security checklist: approve servers by URL or command, pin OAuth scopes, set tool rules, keep a person in the loop and log every call.
6 min read
Founder & VP Product, Nirmata
Ritesh Patel
Ritesh Patel is a founder of Nirmata and leads its products. He writes about governing AI coding agents, MCP security and Kubernetes policy as code.
281 posts
AI
How to classify MCP tools by risk (read, edit, delete)
Sort MCP tools into read, edit and delete classes with the spec's readOnlyHint and destructiveHint. Set each class yourself, since hints are not guarantees.
6 min read
Kubernetes
How to run the CIS Kubernetes Benchmark on EKS, AKS and GKE
Run kube-bench on nodes, its cloud target for managed services, and Kyverno for pods and RBAC. Pick the benchmark version first, then map each check to it.
6 min read
Kubernetes
SEBI CSCRF and Kubernetes: what policy can enforce
SEBI's CSCRF never names Kubernetes. Policy can enforce its hardening, least privilege and baseline clauses. Logging, MFA and monitoring need other controls.
5 min read
AI
How to pin an AI agent to its approved plan
Pin an AI agent to its approved plan by allowlisting exact tool calls, denying the rest and checking arguments in a PreToolUse hook. Claude Code steps included.
6 min read
AI
How to set tool-level authorization for AI agents
Tool-level authorization decides which tools an agent may call. Learn how the MCP spec splits that job and how Claude Code evaluates deny, ask and allow rules.
6 min read
AI
Check a subagent's OpenShell policy against a boundary
OpenShell's docs call a maximum-access policy a boundary. The prover checks that a subagent's policy allows nothing beyond the parent's. Here is how to run it.
7 min read
AI
What is ABAC for AI agents?
ABAC grants or refuses an agent's action by checking attributes of the agent, the tool, the operation and the environment. Here is how to map it to tool calls.
9 min read
AI
OpenShell credentials and inference routing explained
OpenShell agents hold placeholders, not API keys. The supervisor swaps in the real key only where policy and the profile allow it. Models are called natively.
9 min read
AI
How to write OpenShell policies
Write an OpenShell sandbox policy in YAML: set filesystem and Landlock rules at startup, scope each network rule to one binary, then verify changes live.
9 min read
Kubernetes
OpenShell vs Agent Substrate vs Kubernetes Agent Sandbox
OpenShell, Agent Substrate and Kubernetes Agent Sandbox solve different parts of running AI agents. Compare what each manages, enforces and requires.
7 min read
Kubernetes
How to find over-privileged AI agents
Find over-privileged AI agents by testing each agent's Kubernetes service account with kubectl auth can-i --as, checking escalation paths and reading audit logs
6 min read