Economies of Scale for MCP and Agents

Fri, 18 Sep 2026 00:00:00 +0200

Presented by Magnus Jungsbluth and Jan Brennenstuhl at AGNTCon + MCPCon Europe in Amsterdam on 18 September 2026.

Materials #

Reading companion #

An agent should not hold a shared, long-lived provider credential. The broker ties delegated access to both the person and the agent, with chosen permissions and optional expiry. On a tool call, a gateway exchanges the agent’s token for a provider token; the provider token does not enter the agent’s context.

This is a short reading companion, not a transcript. The supporting article explains the identity model and the engineering lessons in accessible HTML.

AppSec in the Age of Agentic Engineering

Fri, 03 Jul 2026 00:00:00 +0200

Guest lecture by Jan Brennenstuhl for the cybersecurity course at Hochschule für Technik und Wirtschaft Berlin (HTW), summer term 2026.

Materials #

Reading companion #

Coding agents write a growing share of production code, so security feedback that arrives after the code exists cannot keep up. The lecture argues that AppSec teams get the most leverage from the harness the agent runs in: the rules, tools, sandboxes and credentials around the model, not the model itself. Three practices follow: deliver security findings while the task is still in the agent’s context, run agent tasks in disposable sandboxes with short-lived task-scoped credentials, and measure risk per change instead of per release.

This is a short reading companion, not a transcript. The supporting essay is the condensed lecture with context and references in accessible HTML.

Speaking · Brennenstuhl on Security

Economies of Scale for MCP and Agents

Materials #

Reading companion #

AppSec in the Age of Agentic Engineering

Materials #

Reading companion #