Field notes

MCP Security Blog

Practical guides on MCP security, MCP prompt injection, layered runtime enforcement, and AI agent security in production.

Coverage map
01MCP runtime security
02Governed execution
03EU AI Act evidence
04Agent threat models
Release Analysis·June 7, 2026·15 min read·By Quinten Stroobants

Why MCP Security Needs Layered Runtime Enforcement

What McpVanguard v2.1.0 changes: preflight normalization, deterministic blocking, camouflage detection, semantic scoring as an advisor, behavioral signals, and explicit policy composition.

Read Article
Layered MCP runtime enforcement path
Runtime pathv2.1.0
L0Normalize
L1Deterministic
L2Advisory
Governance·June 4, 2026·10 min read·By ProvnAI Research Team

EU AI Act for Autonomous Agents: Evidence Architecture in Practice

Articles 13, 14, and 17 mapped to technical evidence architecture for autonomous AI governance workflows.

Read
Security·June 4, 2026·9 min read·By ProvnAI Research Team

What Is an MCP Security Proxy? Prompt Injection Defense for AI Agents

How an MCP security proxy inspects routed AI agent tool calls before execution, reducing prompt-injection impact and blocking unsafe tool outcomes.

Read
Security·May 20, 2026·10 min read·By ProvnAI Research Team

MCP Security in Production: The Definitive 2026 Guide

A layer-by-layer guide to securing MCP deployments in production - full attack surface, five-layer defense architecture, and a 10-point readiness checklist.

Read
Governance·May 14, 2026·8 min read·By ProvnAI Research Team

EU AI Act for Agentic AI: Technical Compliance Requirements

How the EU AI Act applies to autonomous agents. High-risk classification triggers, Articles 13/14/17, and the evidence architecture that supports them.

Read
Architecture·May 6, 2026·12 min read·By ProvnAI Research Team

OWASP Top 10 for AI Agents: The 2026 Threat Model

The definitive vulnerability taxonomy for autonomous AI deployments. 10 risk categories mapped to real attack patterns, mitigations, and detection surfaces.

Read
Contribute

Write with us

Working on MCP security, agent governance, or formal verification? We publish original technical research and collaborate with security engineers and architects.

Get in touch