MCP in the SOC: what governance and evidence controls matter most?

TL;DR: MCP only becomes useful in an AI SOC when the harness, evidence quality, and governance controls are stronger than the protocol itself, especially in multi-user environments with trace data, service accounts, and code execution, according to Corelight. The practical test is whether the system can show its work, stay attributable, and keep humans in control of the blast radius.

Editorial analysis by NHI Mgmt Group, based on content published by Corelight: “What the Black Hat NOC taught me about MCP & agentic SOCs (Chapter 4 of 4)”.

Key questions

Q: What breaks when an AI SOC uses MCP without a governance harness?

A: Without a governance harness, MCP can blur attribution, expand tool access, and expose sensitive traces to people or processes that were never meant to see them.

Q: Why do traces and prompts need the same controls as security logs?

A: Because traces often contain copies or summaries of the same sensitive data the original logs hold.

Q: What are the signs that an AI agent is overstepping its intended SOC role?

A: Warning signs include agents taking actions outside their assigned workflow, touching tools they do not need, making repeated escalations without clear evidence, or creating case changes that analysts cannot easily explain.

Practitioner guidance

• Define read-only versus execution workflows Allow the agent to summarize, pivot, and retrieve first, then gate any action that can change state, touch production data, or modify code.
• Bind every prompt and action to a named human Require an identity layer that makes each analyst prompt, query, and tool invocation attributable, especially in multi-user environments.
• Treat traces like source telemetry Store prompts, outputs, and execution records under the same access controls and retention rules as the logs they were derived from.

Bottom line: MCP in the SOC creates a governance problem as much as a technical one because traces, prompts, and tool calls can all carry sensitive evidence.

Explore further

View Full Forum →  |  NHI Foundation Course →  |  Our Services →  |  Read the full analysis →