UBAG authorization console

MCP gateway the agent you deploy, and what happens to the key

Web layer the agents that arrive at your site

Before you deploy the agent

Tools this configuration makes reachable

nothing yet

Each one is still bound to the sites that granted its verb.

SHADOW ENFORCE

Run a real agent against a real vulnerability

The booking service below has the Melbourne bug in it: its cancellation endpoint never checks who owns the booking. Grant read and create on the left and watch the agent get refused. Then tick cancel and run it again.

No steps yet.

Bookings, live

not loaded

What this configuration would have done

Before agents arrive at your site

Resources this site exposes to agents

Comma separated. A resource you never declared is unreachable.

A granted verb still binds to resources the caller owns

Before you deploy the agent

Run a real agent against a real vulnerability

What this configuration would have done

Before agents arrive at your site

What arriving agents would get