Developer builds AI agent revocation tool after finding no clean way to stop rogue agents

·1 views

A developer discovered that stopping a single misbehaving AI agent mid-task is harder than it should be, as common options like rotating API keys or killing processes cause collateral damage or data loss. Through experimentation, they identified four core problems: conflating agent identity with credentials, slow credential expiry windows, over-permissioned delegation to sub-agents, and audit logs that agents can manipulate. To address these, they built Chancery, a self-hosted, open-source tool that enforces permissions via a proxy layer, ensuring revocation takes effect on the very next tool call. The project also introduces structurally narrowing delegation, so child agents can never exceed a parent agent's permissions and revoking a parent automatically cuts off its entire subtree. Chancery is released as a single Go binary under the Apache 2.0 license and is currently in pre-alpha, with the developer openly inviting community feedback.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

PromptLedger v0.7 Adds Evaluation Runs and Regression Gates for Prompt Versioning

PromptLedger v0.7 has been released, introducing evaluation runs, metric comparisons, and policy-based regression gates to its prompt version management workflow. Previously, the tool could track prompt history and production labels but could not determine whether a newer prompt version actually performed better than its predecessor. The update allows external benchmark tools to record results — including accuracy, latency, and cost metrics — against specific prompt versions for later comparison. Users can compare metrics between two versions or labels and define gate policies that specify acceptable thresholds for regression in each metric. If a candidate version exceeds a defined regression limit, the gate command returns a non-zero exit code, enabling the check to be integrated into automated deployment pipelines.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MCP Standardizes AI Agent Tool Connections But Does Not Replace App Logic

Model Context Protocol (MCP) is gaining significant attention in AI development circles, but its actual function is narrower than many assume. MCP does not enhance an agent's intelligence or reasoning; instead, it standardizes how AI agents connect to and interact with external tools and services. Before MCP, developers building TypeScript-based AI systems had to write separate, inconsistent integrations for every API or tool they wanted an agent to use. MCP addresses this by providing a uniform connection layer between the agent runtime and external capabilities, similar to how HTTP standardized communication between web systems. However, critical concerns such as authorization, input validation, retry logic, and observability remain the responsibility of the application developer, not MCP.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

n8n and MCP Serve Three Distinct Roles That Most Tutorials Conflate

The Model Context Protocol (MCP) can be integrated with n8n in three separate ways, each serving a different purpose. First, n8n can act as an MCP server, exposing existing workflows as callable tools for external AI agents like Claude or Cursor. Second, n8n can function as an MCP client, allowing its own AI Agent workflows to consume tools from external MCP servers. Third, a community-built server called czlonkowski/n8n-mcp helps coding agents draft new n8n workflows from plain-language descriptions, using knowledge of n8n's roughly 2,000 nodes. Confusion arises because most tutorials cover only one of these configurations without acknowledging the others, leading users to wire up the wrong setup.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Why Hybrid Cloud Networks May Be the Worst of Both Worlds

A forthcoming O'Reilly book co-authored by networking experts argues that hybrid cloud environments combine the costs and complexities of both on-premises and cloud infrastructure while delivering few of the benefits of either. The authors note that even as enterprise cloud adoption has grown, investment in on-premises networking has simultaneously increased rather than declined. This trend reflects a growing understanding among IT professionals of where cloud is appropriate and where it falls short, leading organizations to repatriate workloads back to their data centers. The resulting hybrid 'franken-network' spans both environments, creating layered operational and security challenges. The authors liken the situation to hybrid cars, which carry the drawbacks of both combustion and electric systems while offering only modest advantages.

0 comments Read more at DEV Community