Agent-Governance

If you’re running more than a handful of MCP-backed agents in production, you’ve already hit the wall: point-to-point connections between every agent and every MCP server create an N×M integration nightmare, credential sprawl, and zero visibility into who’s calling what. AWS’s answer in 2026 is a two-layer governance stack — Bedrock AgentCore for per-agent MCP server integration and access control, and the A2A Gateway for centralized agent registry, discovery, routing, and rate limiting across your entire fleet. Here’s how to set it up, what each piece actually does, and where the sharp edges are. ...

If your team is running AI coding agents in production — Claude Code, Cursor, Windsurf, GitHub Copilot — you’ve probably already felt the gap between traditional AppSec and what these agents actually do. Traditional security tools scan committed code. Agents don’t just write code; they install MCP servers, download skills, run shell commands, and make API calls. By the time a traditional SAST scan runs, the damage is already done. ...

Released on April 2, 2026, the Microsoft Agent Governance Toolkit is the first open-source runtime security framework to address all ten risks on the OWASP Agentic AI Top 10. Shipped under the MIT license, it provides deterministic policy enforcement at the agent action layer with less than 5ms overhead per evaluated action. As the agentic AI security market grows from a projected $1.65 billion in 2026 toward an estimated $13.52 billion by 2032 at roughly 42% CAGR, this toolkit arrives at exactly the moment enterprises need a vendor-neutral, community-owned standard for governing what their AI agents are actually permitted to do. ...