{"data":{"id":"4b38f0e4-a4aa-40b4-919d-a6cf21571ffa","title":"AgentCap: Capability-Based Runtime Authorization for Secure LLM Agent Execution","summary":"AgentCap is a runtime authorization layer that takes the authorization decision out of the language model and mediates each tool invocation through an MCP wrapper. It checks declared intents against policy constraints, then issues short-lived, budget-bounded capability tokens validated at the tool boundary. Across AgentDojo and InjecAgent it reduced attack success in every evaluated setting, reaching 0% with GPT-5.4 on both benchmarks and blocking all attempted unauthorized executions in controlled adversarial scenarios.","solution":"AgentCap itself is the mitigation: a runtime authorization layer that mediates every tool invocation through an MCP wrapper, validating short-lived, budget-bounded capability tokens at the tool boundary, with delegation limited to session-bound parent-child chains.","labels":["security","research"],"sourceUrl":"https://arxiv.org/abs/2611.00729v1","publishedAt":"2026-10-31T08:13:11.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"info","attackType":["prompt_injection"],"issueType":"research","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":["OpenAI"],"affectedVendorsRaw":["GPT-5.4","AgentDojo","InjecAgent","MCP"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-10-31T08:13:11.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","confidentiality"],"aiComponentTargeted":"agent","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":"preprint","atlasIds":["AML.T0051"]}}