--- title: Agent Immunization: A New Model for Building Trusted AI... description: AI agents autonomously pull in packages, MCP connectors, and tools with no ability to judge whether they're safe, creating supply-chain risk that traditional... canonical: https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Agent Immunization: A New Model for Building Trusted AI Agents | daily.dev og:description: AI agents autonomously pull in packages, MCP connectors, and tools with no ability to judge whether they're safe, creating supply-chain risk that traditional... og:url: https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g og:image: https://api.daily.dev/og/posts/STX1xt19G.png og:image:alt: Agent Immunization: A New Model for Building Trusted AI Agents og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Agent Immunization: A New Model for Building Trusted AI Agents **[JFrog](https://daily.dev/sources/jfrog)** · 5 min read · 2 upvotes · 1 comments ## Summary AI agents autonomously pull in packages, MCP connectors, and tools with no ability to judge whether they're safe, creating supply-chain risk that traditional perimeter defenses like prompt filtering, scanners, or sandboxes can't fully address. The proposed alternative, called 'agent immunization', argues security should be built into what an agent consumes, builds, and ships rather than bolted on from outside: nothing is trusted by default, enforcement happens at the point of action, and every action traces to a scoped identity. Human review of every pull request doesn't scale once agents generate hundreds of changes a day, so trust needs to be embedded in the workflow itself to allow safe autonomy at scale. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Community discussion Top comments from developers on daily.dev. **@kartiknvj** · 0 upvotes > Nothing trusted by default is the right posture, especially once agents start pulling tools and MCP servers at runtime. That supply-chain surface is exactly where I got burned, so I now vet every MCP server before it touches an agent. I wrote up my checklist here: [https://dev.to/kartik-nvjk/how-i-vet-mcp-servers-before-trusting-them-in-my-agent-1ngh](https://dev.to/kartik-nvjk/how-i-vet-mcp-servers-before-trusting-them-in-my-agent-1ngh) ## Similar posts on daily.dev - [Agentic AI Security: Defending Against Prompt Injection and Tool Misuse](https://daily.dev/posts/agentic-ai-security-defending-against-prompt-injection-and-tool-misuse-8x1r1ytqn) · Machine Learning Mastery · 1 upvotes · 0 comments - [Package Security Defenses for AI Agents](https://daily.dev/posts/package-security-defenses-for-ai-agents-6cyningof) · Andrew Nesbitt · 1 upvotes · 0 comments - [Threat Modeling Meets Agents: Security-Focused AI Agents for Hardening CI/CD Pipelines](https://daily.dev/posts/threat-modeling-meets-agents-security-focused-ai-agents-for-hardening-ci-cd-pipelines-erjzhsaaz) · Software Testing Magazine · 17 upvotes · 0 comments - [Agents are rewriting the rules of security. Here’s what engineering needs to know.](https://daily.dev/posts/agents-are-rewriting-the-rules-of-security-here-s-what-engineering-needs-to-know--khtu9taim) · The New Stack · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#mcp](https://daily.dev/tags/mcp), [#appsec](https://daily.dev/tags/appsec), [#devsecops](https://daily.dev/tags/devsecops) [View this post on daily.dev](https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Agent Immunization: A New Model for Building Trusted AI Agents","url":"https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g"},"datePublished":"2026-08-24T15:34:16.187Z","dateModified":"2026-09-14T07:55:56.364Z","description":"AI agents autonomously pull in packages, MCP connectors, and tools with no ability to judge whether they're safe, creating supply-chain risk that traditional...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bda6882275baa89be30030d270899742?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/bda6882275baa89be30030d270899742?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"JFrog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"JFrog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/b11bf37102384ac9983be701b2cf7cd5","url":"https://daily.dev/sources/jfrog"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":2},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"ai-agents,mcp,appsec,devsecops","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"JFrog","item":"https://daily.dev/sources/jfrog"},{"@type":"ListItem","position":3,"name":"Agent Immunization: A New Model for Building Trusted AI Agents"}]} {"@context":"https://schema.org","@type":"WebPage","@id":"https://daily.dev/posts/agent-immunization-a-new-model-for-building-trusted-ai-agents-stx1xt19g","comment":[{"@type":"Comment","text":"Nothing trusted by default is the right posture, especially once agents start pulling tools and MCP servers at runtime. That supply-chain surface is exactly where I got burned, so I now vet every MCP server before it touches an agent. I wrote up my checklist here: https://dev.to/kartik-nvjk/how-i-vet-mcp-servers-before-trusting-them-in-my-agent-1ngh","datePublished":"2026-08-24T18:10:01.859Z","url":"https://daily.dev/posts/STX1xt19G#c-Q9ldighQ2","author":{"@type":"Person","name":"kartik-nvjk","url":"https://daily.dev/kartiknvj","image":"https://media.daily.dev/image/upload/s--3gGgsVCw--/f_auto/v1781456774/avatars/avatar_TvTVeiMdkRCqWUDullFmy?_a=BAMAMiWQ0"}}]} ```