Latest / Agent-Readable Web
Agent-Readable Web Files and Protocols: A Field Guide
A practical decision guide to 17 web discovery, access, authentication, tool, and commerce mechanisms for AI agents.
Read latestInsights
Research, in the open.
Analysis of AI-security threats, autonomous-agent risk, and the techniques attackers actually use, published through KevinBytes.
Field guide
OWASP LLM Top 10, mapped to real AI systems.
A visual guide to the 2025 OWASP categories for AI agents, RAG, MCP, and tool-connected applications.
Open the OWASP guidePractical resources
Working guides for AI-security decisions.
Archive
Published research and technical guides.
Showing 30 of 30 posts.
Agent-Readable Web13 min read
Agent-Readable Web Files and Protocols: A Field Guide
A practical decision guide to 17 web discovery, access, authentication, tool, and commerce mechanisms for AI agents.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
HTTP Link Headers for AI Agents and Machine Clients
How to publish typed HTTP links for real machine resources without turning performance hints into false service discovery.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
DNS-AID Agent Discovery with SVCB and DNSSEC
A maturity and security review of the DNS-AID draft, SVCB records, DNSSEC, and the decision not to advertise a nonexistent agent endpoint.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
Markdown Content Negotiation for AI Agents
How Cloudflare Markdown for Agents handles Accept, Vary, token counts, origin policy headers, conversion limits, and rollback.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
robots.txt Rules for AI Crawlers
How RFC 9309 group matching affects AI crawler policy, protected paths, operator tokens, and post-access content-use declarations.
Last reviewed July 16, 2026Read guide
Agent-Readable Web7 min read
Web Bot Auth and HTTP Message Signatures
What Web Bot Auth asks bot operators to publish and sign, how verification works, and why content origins should not add fake key directories.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
Content Signals for AI Training, Search, and AI Input
How Content Signals declares ai-train, search, and ai-input preferences, and why origin policy should remain authoritative.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
API Catalog Discovery with RFC 9727 and Linkset JSON
How RFC 9727 discovers maintained public APIs through a well-known URI, Linkset JSON, typed relations, and explicit ownership.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
OAuth and OpenID Connect Discovery for AI Agents
How agents distinguish OAuth authorization-server metadata from OpenID Provider configuration and reject invented issuers or endpoints.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
OAuth Protected Resource Metadata with RFC 9728
How RFC 9728 binds a protected resource to authorization servers, scopes, token methods, and OAuth discovery used by MCP clients.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
auth.md and Agent Registration over OAuth
A technical review of WorkOS's open auth.md proposal, its OAuth building blocks, and why structured metadata must remain authoritative.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
MCP Server Cards and Draft Service Discovery
What current draft SEP-2127 proposes for MCP Server Cards, catalog discovery, runtime checks, and stale metadata risk.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
Agent Skills Discovery Indexes and Package Trust
How Cloudflare's Agent Skills v0.2.0 proposal discovers skill packages, verifies SHA-256 digests, and preserves package trust boundaries.
Last reviewed July 16, 2026Read guide
Agent-Readable Web5 min read
WebMCP Browser Tools for AI Agents
How current WebMCP draft APIs register browser tools, use Permissions Policy, preserve human oversight, and replace obsolete context calls.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
x402 HTTP Payments for AI Agents
How x402 uses HTTP 402 and signed payment headers, what facilitators do, and why a site needs a priced machine resource before adoption.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
Machine Payments Protocol and HTTP Authentication
How MPP uses the Payment HTTP authentication scheme, OpenAPI pricing metadata, charge and session intents, and server fulfillment controls.
Last reviewed July 16, 2026Read guide
Agent-Readable Web6 min read
Universal Commerce Protocol for Agent Checkout
How UCP business profiles describe services, capabilities, payment handlers, transport bindings, signed requests, and merchant responsibility.
Last reviewed July 16, 2026Read guide
Agent-Readable Web7 min read
Agentic Commerce Protocol Checkout
How ACP connects product feeds, merchant checkout state, delegated payment tokens, idempotency, and order fulfillment without displacing the seller.
Last reviewed July 16, 2026Read guide
Agentic AI4 min read
AI Agents Are Becoming Part of the Production Control Plane
AI-agent risk is not just prompt injection. Once an agent can call tools, touch data, modify workflows, or influence CI/CD, it becomes part of the production...
Last reviewed June 23, 2026Read guide
AI Agent Security10 min read
AI Agent Security Assessment: What to Review Before Production
A pre-launch review list for AI agents that touch production APIs, customer data, tools, memory, or RAG context.
Last reviewed May 4, 2026Read guide
MCP Security11 min read
MCP Security Review Checklist: How to Assess Tool-Connected LLM Systems
A security checklist for MCP servers, clients, OAuth flows, tokens, tools, permissions, trust boundaries, logging, and blast radius.
Last reviewed May 4, 2026Read guide
AI Agent Security10 min read
What Is AI Agent Blast Radius?
AI agent blast radius is the maximum plausible damage an agent can cause if manipulated, misconfigured, over-permissioned, or exposed to hostile context.
Last reviewed May 4, 2026Read guide
RAG Security9 min read
RAG Security Assessment: Tenant Isolation, Data Leakage, and Prompt Injection Risks
How to review RAG systems for authorization failures, tenant-isolation gaps, prompt injection, vector-store leakage, document poisoning, and audit logging.
Last reviewed May 4, 2026Read guide
Security Diligence8 min read
AI Red Team vs. LLM Pentest vs. AI Security Assessment: What's the Difference?
How founders, CTOs, CISOs, and product-security teams can choose between an AI red team, LLM pentest, AI security assessment, or production readiness review.
Last reviewed May 4, 2026Read guide
Security Diligence9 min read
How to Build AI Agents That Pass Enterprise Security Review
How engineering and product teams can prepare AI agents for enterprise security review, production launch, customer diligence, and governance scrutiny.
Last reviewed May 4, 2026Read guide
MCP Security9 min read
MCP Threat Model: Clients, Servers, Tools, Tokens, and Trust Boundaries
An MCP threat model for teams connecting LLMs and AI agents to tools, OAuth tokens, APIs, local servers, SaaS systems, and production workflows.
Last reviewed May 4, 2026Read guide
Prompt Injection8 min read
Indirect Prompt Injection Through Documents, Emails, Webpages, and Tool Output
How indirect prompt injection reaches AI agents through RAG systems, copilots, MCP tools, webpages, emails, PDFs, memory, and tool outputs.
Last reviewed May 4, 2026Read guide
AI Agent Security9 min read
AI Agent Tool Permissions: Read, Write, Delete, Send, Execute, Deploy
A framework for classifying AI agent tool permissions by business impact, authorization boundary, required controls, and production readiness.
Last reviewed May 4, 2026Read guide
RAG Security8 min read
RAG Authorization Anti-Patterns: When Vector Search Bypasses Access Control
Common RAG authorization failures, tenant-isolation gaps, vector-store access-control mistakes, source attribution issues, and safer retrieval design.
Last reviewed May 4, 2026Read guide
Post-Incident Engineering6 min read
Post-Incident Engineering: Technical Assessment for Legal and Executive Review
How disciplined engineering assessment helps legal, insurance, and executive teams understand root cause, technical exposure, and the next defensible decision...
Last reviewed June 20, 2026Read guide