MCP turns AI coding agents into connected systems
MCP makes AI coding agents more useful by connecting them to tools, data and workflows. It also means teams need production-style security boundaries around those connections.
K
Kyluke McDougall 
When AI agents touch databases, speed needs boundaries
AI coding agents can accelerate schema work, migrations and backend changes. They should not be allowed near production data without clear operating rules.
K
Kyluke McDougall 
When coding agents enter the delivery pipeline
AI coding agents become strategically interesting when they touch CI, pull requests, reviews and deployments. That is exactly when teams need clear operating rules.
K
Kyluke McDougall 
When AI agents install packages, supply-chain security becomes architecture
AI coding tools speed up development. They also speed up the moment when compromised dependencies, scripts and credentials become production risk.
K
Kyluke McDougall 
Codex hooks show where AI coding is going
AI coding agents are becoming part of the delivery workflow. The teams that benefit most will not be the ones that trust them blindly, but the ones that put policy, review and operational controls around them.
K
Kyluke McDougall 
AI coding agents are now part of the attack surface
Pwn2Own Berlin is testing Codex, Claude Code and Cursor. For teams adopting coding agents, the lesson is clear: treat the agent runtime as privileged software, not just a smarter editor.
K
Kyluke McDougall 
Shadow AI: why companies need an inventory of AI-built apps
AI app builders make internal tools and prototypes visible very quickly. The real risk appears when nobody knows which apps exist, which data they touch and who owns them.
K
Kyluke McDougall 
AI Agent Memory Is Now Part of Your Security Architecture
Persistent AI memory can make assistants more useful, but it also creates a new attack surface. Companies need clear rules for what agents remember, retrieve and trust.
K
Kyluke McDougall 
Before an AI-built app goes live, it needs a security check
Tools like Lovable, Replit and similar platforms make web apps visible quickly. Before customer data, real users or internal workflows are involved, teams need a clear production and security handover.
K
Kyluke McDougall