Ravi Madabhushi describes an activity-timestamp update that created excessive database writes when agents used an API much faster than people. Batching addressed the immediate pressure, but the incident illustrates how assumptions built around human traffic can break under agent workloads.
Ravi Madabhushi distinguishes the agent acting from the person whose authority it carries. Shared credentials and broad user permissions can conceal that distinction, while exposing every MCP tool gives an agent access beyond what its current task requires.
Ravi Madabhushi argues for user-bound agent identities, task-scoped and time-limited permissions, just-in-time authorization and deterministic enforcement. Audit records should establish who acted, for whom and under what authority, instead of treating an agent's stated intentions as an access-control guarantee.
Watch on YouTube
