|8 min read
Whose Leak Is It? DLP When an AI Agent Holds Your OAuth Token
I assumed an MCP agent on my OAuth token could only see what I could see — but API access can differ from browser permissions, and onward transfers need their own controls.
[Security][AI & Data]