Wiring capability warrants into autonomous agents

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

Why OAuth scopes aren't enough for autonomous LLM agents calling MCP tools, and how we wired Tenuo capability warrants end-to-end. Scope-gated rollout, two real bugs, multi-hop delegation, and an attack the warrant catches.

Read on brooksmcmillin.com ↗