CloudBolt demo targets AI agent access that escapes approval

Agent access often skips approval

CloudBolt sponsored this post. A recent account in The New Stack said more than 20 percent of the MCP-related access policies reviewed across customer and prospect environments were broken or missing. In most cases, the MCP server ran on someone’s personal token rather than a service account.

The gap usually surfaces after an incident. A personal token puts an engineer’s name into the audit trail for everything the agent did, while a shared service account puts the account’s name there instead. In both cases, the audit trail cannot identify who asked the agent to do the work or who approved the access it used.

Provisioned access leaves a record

Access that goes through a request, approval, and grant in the identity provider is provisioned, and the identity provider records it. Access that an agent picks up along the way is emergent, such as a role inherited from the service that launched it or a developer’s own token lent out to finish a task. The identity provider holds no record of those grants, so contact with something it should not touch is hard to trace back.

CloudBolt plans a live trace

At 12 p.m. Eastern/9 a.m. Pacific on Tuesday, October 27, Shawn Petty, Chief Customer Officer at CloudBolt, and Mike Bombard, Director of Global Pre-Sales Engineering at CloudBolt, will join The New Stack host Viktor Farcic for a live demo. The session will show how to link agent activity to an existing identity provider, set limits on what an agent can touch, and read the resulting audit trail.

Live attendees can ask questions in real time. The agenda includes which infrastructure actions an agent should take without a human signing off, what a usable audit trail for agent behavior contains, and a live trace of one agent’s credentials and actions from the task it ran to the person responsible. People who cannot join live can register for a recording. By registering, people consent to email communications from The New Stack and CloudBolt.

Sources: Thenewstack