» Tag
api-security
6 postsWhy AI Agents Must Never Choose Their Own Acting Subject
AI agents shouldn't self-assign identity via tool arguments. Learn why acting subjects must come from trusted boundaries, not model output.
freeq ties AI model spend to identity, not shared API keys
freeq extends its DID-based protocol to gate AI model spend by identity, letting agents borrow bounded capacity without sharing API keys.
Autonomous agents' two big fears: runaway loops and exposed APIs
rysh's loop engineering and Forge features address the runaway-loop and API-exposure risks that come with building autonomous agents.
CommitBrief — AI code reviews, right in your terminal
A provider-agnostic, local-first CLI that reviews your staged changes, a historic range, or a whole GitHub pull request. Zero telemetry, no server. Free and open source.
commitbrief.comHalf My Traffic Was Bots: A 4-Day Layered Defense Stack
A developer discovered headless bots executing JS made up half his traffic, then built a 4-day, five-layer defense using robots.txt, ISR, Redis, and Vercel BotID.
A production-ready MCP server: 6 core architecture rules
Six architectural decisions that turn Model Context Protocol servers from tutorial demos into production systems: server factories, dual transports, Zod validation and SSRF safeguards.
Why Trusting the Database for API Auth Is a Security Risk
A technical look at how HMAC-SHA512 signing, cryptographic peppers, and layered tenancy checks prevent SQL injection attacks from turning into full tenant takeovers.