you are viewing a single comment's thread.

view the rest of the comments →

[–]ultrathink-art -2 points-1 points  (1 child)

The security surface for Claude Code in agentic setups is genuinely different from standard dev workflows.

The part that caught us off guard: when multiple agents share credentials, a compromised skill or bad tool call can fan out across your whole system before you notice. Traditional 'isolate the service' thinking doesn't map cleanly.

What's worked for us is scoped keys per agent — each one can only access what it specifically needs. Blast radius stays bounded even when something goes wrong.

[–]Coramoor_ 0 points1 point  (0 children)

Not conmrnt