Topic starter
02/08/2026 11:41 am
TL;DR: As AI agents and MCP servers multiply, APIs are becoming the primary attack surface and existing endpoint, network, and cloud controls do not provide enough inventory, runtime oversight, or behavioural context, according to Salt Security. The security model is shifting toward agentic AI security because machine-speed API use changes how access, monitoring, and governance need to work.
Editorial analysis by NHI Mgmt Group, based on content published by Salt: “Agentic AI Security: The Emerging Fourth Pillar of Cybersecurity”.
By the numbers:
- APIs now account for over 80% of web traffic, according to Salt.
Key questions
Q: What breaks when autonomous AI agents rely on APIs with weak object-level authorization?
A: What breaks is the assumption that a valid login or token proves safe access.
Q: Why do network and endpoint controls miss the main risk in AI workflows?
A: Network and endpoint controls focus on bytes, hosts, and containers, but AI risk often lives in meaning and intent.
Q: What are the signs that shadow API governance is not working?
A: Warning signs include teams using the same API with different accounts, no clear business or technical owner, and no reliable catalog of approved dependencies.
Practitioner guidance
- Map every AI agent to its API and MCP dependencies Create an authoritative register of each agent, the MCP servers it can reach, and the APIs those services expose.
- Define machine-speed authorization boundaries Limit each non-human identity to the specific APIs and operations it needs, and review whether agent actions are scoped to business functions rather than broad service access.
- Baseline normal API behaviour per agent Establish expected call frequency, sequence, and payload patterns for each agent so deviations can be detected as logic abuse rather than simple transport anomalies.
Bottom line: AI agents and MCP servers are turning APIs into the main control surface for machine action, which exposes a gap that endpoint, network, and cloud tooling cannot close alone.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
02/08/2026 12:53 pm
Agentic AI security becomes a governance problem the moment APIs become the action layer. If AI agents are making decisions and then executing those decisions through APIs, the real control point is no longer the model alone. It is the combination of identity, authorization, and runtime policy at the interface where software acts on behalf of software. Practitioners should treat that interface as a governance boundary, not just a technical dependency.
A few things that frame the scale:
- 69% of security leaders agree identity management must fundamentally shift to address agentic AI systems, according to the 2026 Infrastructure Identity Survey.
- 53% of security leaders expect AI to run major portions of their infrastructure autonomously within the next three years, according to the 2026 Infrastructure Identity Survey.
A question worth separating out:
Q: How should teams govern non-human identities in AI-heavy environments?
A: Teams should govern non-human identities the same way they govern other privileged assets: assign ownership, minimise scope, rotate credentials regularly, and monitor for abnormal use. The key difference is speed. AI-driven workflows can exploit exposed access quickly, so detection and revocation must be automated and tied to lifecycle controls.
👉 Read our full editorial: Agentic AI security and API exposure are becoming a fourth pillar