Tool Stack
AI Security Stack
Least-privilege tooling, approval gates and audit trails for agentic systems.
1 min readupdated 2026-08-01
/ quick answer
Give agents real capability without giving them a path to real damage. Least-privilege tooling, approval gates and audit trails for agentic systems.
Least-privilege tooling, approval gates and audit trails for agentic systems. Give agents real capability without giving them a path to real damage. The stack combines Supabase RLS (per-user authorisation on data), Scoped MCP servers (typed, minimal tool surface), Secret manager (no credentials in prompts or repos), Slack or in-app approvals (human gate on writes), Immutable audit log with alerting. This tool stack node is part of the Onexial knowledge graph and links to related concepts, workflows and tools below.
Purpose
Give agents real capability without giving them a path to real damage.
Tools Included
- Supabase RLS (per-user authorisation on data)
- Scoped MCP servers (typed, minimal tool surface)
- Secret manager (no credentials in prompts or repos)
- Slack or in-app approvals (human gate on writes)
- Immutable audit log with alerting
Workflow Supported
Alternatives
- Gateway-level guardrail products
- Custom policy middleware
/ frequently asked
What is the AI Security Stack stack for?
Give agents real capability without giving them a path to real damage.
Which tools are in this stack?
Supabase RLS (per-user authorisation on data), Scoped MCP servers (typed, minimal tool surface), Secret manager (no credentials in prompts or repos), Slack or in-app approvals (human gate on writes), Immutable audit log with alerting.
Are there alternatives to this stack?
Yes — Gateway-level guardrail products, Custom policy middleware.
↳ connected nodes
Workflow↳ linked
Harden an AI System Against Injection and Misuse
Architectural controls that survive a manipulated model.
Workflow↳ linked
Audit MCP Tool Security
A checklist that catches the failure modes unique to model-driven tool calls.
Dictionary↳ linked
AI Security
AI security protects systems where the model is an untrusted decision-maker acting on untrusted input with real tool access.
Dictionary↳ linked
AI Governance
AI governance is the set of policies, records and reviews that make an organisation's AI use accountable and auditable.
Prompt↳ linked
AI System Threat Model Prompt
Produces a concrete threat model for an AI system with tool access.
Tool Stack↳ linked
AI Observability Stack
Traces, cost, evals and quality drift for AI systems in production.