Unverified50% confidenceFactExact time
The project ID is not a secret; under an if true rule an attacker needs only a single curl command to retrieve the entire orders collection, with no key or token required.
1
Sources
50%
Confidence
Long-term
Relevance
10/16/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedCredentials should be bound to execution rather than to the Agent, and what the Agent receives should be a restricted token rather than a master key.67% similarUnverifiedProjects created by an Agent remain in an isolated state before being claimed, without affecting other users.64% similarUnverifiedAgent security has an inherent split between identity authorization and intent consistency: whether an identity can call a certain API is a traditional IAM problem, whereas whether the current call still conforms to user intent is an entirely new proposition.63% similarUnverifiedAgent Core has built-in harness capabilities, allowing developers to deploy an agent by simply providing a JSON configuration specifying the model and system prompt, without writing any agent code.63% similarUnverifiedThe core principle of Agent security is that identity and authorization must come from a trusted session context and must never come from the model's output.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1043246API
curl https://kongchang.com/api/v1/knowledge/claims/1043246MCP
get_claim(id=1043246)