Blog
Product Updates
Introducing MCP Tool Filtering: Fine-Grained, Least-Privilege Authorization for AI Agents
Oct 2026
|
3 min read
3 min readOnce an AI agent is authorized to connect to an MCP server, it can see and call every tool that server exposes. That’s fine when a server does one narrow job. But most real-world MCP servers – GitHub, Slack, Jira, internal platforms – bundle dozens of tools together, and not all of them carry the […]
Aembit now lets you allow or block individual MCP tools per agent, not just entire servers. See how tool filtering works.
Dig in
Recent Stories
How to give autonomous agents useful access while preserving identity, accountability, and control.
A hands-on EC2-to-GitHub walkthrough shows what AgentCore Identity actually requires when the agent runs outside AgentCore Runtime.
AI agents don’t neatly fit into your IAM chart. They switch roles, borrow authority, and rewrite what identity means at runtime. Here’s what that means for you.
PAM is changing as AI agents, workloads and machine identities take on more privileged access.
AI assistants are becoming coworkers. Aembit enterprise customers can secure them with the identity and access controls they already have in place, no new product or deployment required.
Personal AI agents like Meta Muse will be coming to work with employees. Aembit enforces how they access enterprise systems.
Personal agents are about to test whether enterprises know who, or what, is using their credentials.
Secrets managers still matter. But AI agents and workloads are changing when stored credentials make sense.
Broad credentials made sense when fixed application logic stood between users and actions, but AI agents have changed that equation.
What began as a way for agents to call tools is expanding into infrastructure for longer-running, governed interactions across enterprise systems.
XAA removes a growing source of agent friction, but uneven support across the enterprise ecosystem makes the transition the harder problem to solve.
Ready to Try Workload IAM?
Get started in minutes, with no sales calls required. Our free-forever tier is just a click away.
