Agent Governance Moves to Foundation Stewardship and the MCP Attack Surface Keeps Expanding

News

Microsoft Plans to Hand Agent Governance Toolkit to a Neutral Foundation

The most underreported part of the AGT announcement is Microsoft's stated intent to move the project to a foundation like LF AI and Data, not keep it under Redmond's thumb. That matters because governance infrastructure for agents needs community trust, and vendor-controlled tooling rarely gets broad adoption across competing stacks.

Analysis

Socket Flags the Credential Scoping Gap That AGT Does Not Solve

Socket's writeup is the most technically honest take on AGT's limits: runtime policy enforcement does not automatically mean per-task credential scoping, and most orchestration frameworks do not revoke credentials after task completion. If you are deploying agents against external APIs, this is the gap that will bite you before any of the OWASP taxonomy risks do.

Security

Bitsight Finds ~1,000 MCP Servers Exposed With No Authorization

Roughly 1,000 MCP servers are sitting open with no auth, and BlueRock Security found 36.7% of 7,000+ MCP servers vulnerable to SSRF attacks that can leak AWS credentials. The MCP attack surface is growing faster than anyone is securing it, and most agent builders are connecting to these servers without a second thought.

Independent Red-Team Shows 0% Policy Bypass With AGT vs 26.67% for Prompt Guardrails

The benchmark number that keeps coming up is 0.00% policy violation rate for AGT's kernel-level enforcement versus 26.67% for prompt-based safety under the same adversarial conditions. That gap is large enough that continuing to rely on prompt guardrails in production is hard to justify once you have seen these numbers.

Tools

AGT v3.0.1 Ships Rust and Go SDKs, SBOM Signing, and 7 New Fuzz Targets

The v3.0.1 release adds Rust and Go SDKs, SBOM generation in SPDX and CycloneDX with Ed25519 signing, and expands fuzzing to 7 targets including prompt injection and MCP scanner. Dependabot now covers 13 ecosystems including cargo and gomod, which matters for teams building multi-language agent stacks.