SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Grantor MCP Tool Lets Developers Cap AI Sub-Agent Permissions Without Sharing Keys

0
·2 views

A tool called Grantor, available as an MCP server, allows developers to assign AI sub-agents limited, cryptographically signed capability budgets instead of full API keys or credentials. Each sub-agent receives a bounded identity specifying which tools it may use, how many times, and for how long, with no ability to exceed those limits. Delegation can be chained, meaning a sub-agent can pass a narrower slice of its own permissions to a child agent, but can never grant more than it holds. Usage limits are strictly enforced, so a budget of 20 uses results in a hard denial on the 21st call rather than a silent override. Revocation is handled via a public smart contract, ensuring that withdrawn permissions fail immediately across all processes holding them.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Developer Fixes 28% eBPF Telemetry Drop Using Gemini AI to Refactor Python Polling Loop

A developer working on VirgilFlow, a Python and eBPF-based infrastructure monitoring tool, identified a bug causing up to 28% of telemetry traces to be dropped under high packet delivery rates. The root cause was a one-by-one ring buffer polling approach inside an asyncio loop, which introduced context-switching latency and caused the kernel buffer head to fall behind producers. Using Google AI Studio with Gemini 1.5 Pro, the developer refactored the consumer to use bulk buffer drainage and zero-copy deserialization, eliminating the bottleneck. The fix enabled stable telemetry ingestion at rates exceeding 100,000 events per second with zero packet loss. Sentry was integrated throughout to monitor buffer overflow errors and verify ingestion latency improvements before and after the patch.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Opinion: Why AGI Affiliation Is a Flawed Benchmark for Engineering Talent

A software engineer and writer argues that the tech industry has increasingly treated AGI involvement as a baseline measure of a developer's worth, a trend he attributes to venture capital narratives and startup recruiting incentives. The essay, originally published on May 14, 2026, contends that the pressure to be affiliated with AGI projects stems from genuine AI capability advances but is amplified by parties who benefit financially from the surrounding hype. The author challenges the assumption that engineers not working on AGI are professionally obsolete, calling it a conflation of affiliation with actual technical competence. He draws on earlier essays to argue that current AI development—rooted in scaled statistical learning—is architecturally distinct from genuine intelligence, and that confusing data access with understanding drives much of the industry's misplaced anxiety. The piece urges engineers to resist letting these distorted metrics define their career trajectories.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Fixes LLM Critic That Blocked Safe Plans Over Completeness, Not Safety

A developer building PlannerCritic, an open-source engine that pairs one LLM to write plans with another to review them, discovered a critical flaw after 16 consecutive strict-mode goals failed incorrectly. The AI critic had been instructed to be 'adversarial' without specifying what that meant, causing it to block plans over minor completeness concerns rather than genuine safety defects. Two plans — one for VPC peering and another for embedding index migration — were incorrectly escalated to human review despite having valid rollback procedures. The fix involved rewriting the critic's system prompt with explicit severity rules and adding a code-level guardrail using a frozenset to automatically downgrade any 'blocker' finding that didn't belong to a defined family of concrete defects. Across 92 post-fix runs, no advisory findings appeared as blockers, confirming that prompt engineering alone was insufficient and a hard programmatic constraint was necessary.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Gemini 1.5 Pro Helps Fix Memory Leak and Taint Drift in Open-Source Financial Security Tool

FluxTrace, an open-source financial security engine that traces illicit funds across graph databases, encountered critical bugs during high-throughput testing involving cyclic transaction networks. The system suffered unbounded memory growth and inflated risk scores exceeding valid bounds, caused by a recursive taint-propagation function whose visited-node cache was scoped locally rather than globally. Developers used Gemini 1.5 Pro in Google AI Studio to analyze a 2-million-node cyclic graph dataset and pinpoint the root cause in the recursive traversal logic. The fix replaced the recursive approach with an iterative Breadth-First Search pattern that enforces cycle bounds, depth limits, and a hard score cap of 1.0. Sentry performance monitoring confirmed the resolution, with worker memory usage dropping from exponential spikes above 4 GB to a stable footprint of approximately 140 MB.

0 comments Read more at DEV Community