Least-Privilege for AI: Authorizing Agents and MCP Tools with A... Luc Chmielowski & Nina Polshakova

This talk explores the integration of agentgateway and Kyverno in the context of AI agents, particularly focusing on the need for least-privilege authorization models as these agents transition to autonomous roles within complex systems. The speakers, Luc Chmielowski from Nirmata and Nina Polshakova from Solo.io, discuss how agentgateway, powered by kgateway, supports the Model Context Protocol (MCP) and works with CNCF policy engines like Kyverno to enforce governance. They demonstrate how Kyverno policies evaluate MCP traffic to prevent unauthorized access and privilege escalation, ensure isolation in namespaces and tenants, and link Kubernetes actions to real user identities. The session emphasizes how leveraging Kubernetes, OIDC lookups, and RBAC can enable Platform and Security teams to maintain continuous compliance for AI workloads while implementing cloud-native best practices.