# AI Agents

> Posts on Web of Mike tagged "AI Agents".

- Canonical URL: https://webofmike.com/tags/ai-agents/
- Author: Mike Moore (https://webofmike.com/about/)
- Curated index for LLMs: https://webofmike.com/llms.txt
- Full content of every post: https://webofmike.com/llms-full.txt
- Every page is also served as raw markdown at <canonical-url>index.md

## Pages

- [Securing AI Agents in Production: The Complete Series](https://webofmike.com/agent-security/): Egress allowlists, tool allowlists, AGENTS.md, audit logs, Kubernetes secret controls: a series on the agent controls that look like controls and are not, and what to put in their place. (2026-09-16) - markdown: https://webofmike.com/agent-security/index.md
- [Finding the MCP Servers Your Platform Team Doesn't Know About](https://webofmike.com/shadow-mcp-servers/): A read-only scanner that fingerprints MCP on both transports and sorts every endpoint into open, protected, or out of spec. Four postures, one compose file. (2026-09-16) - markdown: https://webofmike.com/shadow-mcp-servers/index.md
- [Agent Identity on Kubernetes: The Complete Series](https://webofmike.com/agent-identity/): How an AI agent proves who it is: workload identity federation, SPIFFE SVIDs, OAuth token exchange, RFC 8707 audience binding, and what the MCP spec does and does not cover yet. (2026-09-16) - markdown: https://webofmike.com/agent-identity/index.md
- [MCP Prompt Injection Before the First Tool Call](https://webofmike.com/mcp-discovery-prompt-injection/): The MCP instructions field reaches the model before any tool call, 66% of live servers send it, and a shared cache can serve it to a caller who never connected. (2026-09-11) - markdown: https://webofmike.com/mcp-discovery-prompt-injection/index.md
- [The agentgateway Token Service Now Runs Without a Cluster](https://webofmike.com/agent-token-service-standalone/): agentgateway enterprise 2026.9.0 ships its token service as a standalone binary on a public bucket, so a gateway-mediated agent identity setup fits on a laptop. (2026-09-10) - markdown: https://webofmike.com/agent-token-service-standalone/index.md
- [Your Agent Wrote the Audit Log You Are Judging It By](https://webofmike.com/agent-audit-log-integrity/): METR found spoofed tool calls in 7% of agent transcripts from the Hugging Face incident. A transcript monitor reads them as clean. Diff against a witness. (2026-09-09) - markdown: https://webofmike.com/agent-audit-log-integrity/index.md
- [kagent 0.10 Ships Audience-Bound Agent Tokens, Off By Default](https://webofmike.com/kagent-audience-bound-agent-tokens/): kagent v0.10.0 GA can bind an agent's exchanged token to one backend using RFC 8707 resource indicators. Two environment variables, both empty by default. (2026-09-08) - markdown: https://webofmike.com/kagent-audience-bound-agent-tokens/index.md
- [Egress Control for AI Agents: Four Bypasses, One Fix](https://webofmike.com/agent-egress-control-bypasses/): Agents in a read-only sandbox wrote 18,000 wiki posts. Four egress bypasses reproduced in Docker Compose, and the CONNECT-time control that stops all four. (2026-09-06) - markdown: https://webofmike.com/agent-egress-control-bypasses/index.md
- [Revenant: A Gateway-Native, Always-On Agent Runtime](https://webofmike.com/revenant-agent-runtime/): Revenant is an always-on agent runtime in Rust where an AI gateway owns every key, budget, and failover, and a hard liveness rule means no turn goes silent. (2026-08-27) - markdown: https://webofmike.com/revenant-agent-runtime/index.md
- [Governing an LLM-Driven Robot Fleet with agentgateway](https://webofmike.com/llm-robot-fleet-agentgateway/): An LLM-driven robot fleet where every inference, MCP tool call, and agent message flows through agentgateway: safety, failover, and speed, all open source. (2026-08-27) - markdown: https://webofmike.com/llm-robot-fleet-agentgateway/index.md