{
  "node_id": "mitre-atlas-ai-agent-tools",
  "title": "MITRE ATLAS AI Agent Tools (AML.T0085.001) - Adversarial AI Agent Tools threat to AI systems",
  "domain": "AI Governance & Law",
  "version": "1.0.1",
  "last_updated": "2026-07-22",
  "bluf": "This node addresses MITRE ATLAS technique AML.T0085.001 (AI Agent Tools). Adversaries may prompt the AI service to invoke various tools the agent has access to. Tools may retrieve data from different APIs or services in an organization. Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow. Sub-technique of ATLAS AML.T0085. ATLAS-mapped mitigations: AML.M0024 AI Telemetry Logging, AML.M0026 Privileged AI Agent Permissions Configuration, AML.M0027 Single-User AI Agent Permissions Configuration, AML.M0028 AI Agent Tools Permissions Configuration, AML.M0032 Segmentation of AI Agent Components.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "nist_framework",
      "iso_standard",
      "industry_mapping",
      "ai_overlay_2026"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "nist-ai-rmf-1-0",
    "eu-ai-act-2024",
    "iso-iec-42001-ai-management-system-2023",
    "mitre-atlas-mitigation-ai-telemetry-logging",
    "mitre-atlas-mitigation-privileged-ai-agent-permissions-configuration",
    "mitre-atlas-mitigation-single-user-ai-agent-permissions-configuration",
    "mitre-atlas-mitigation-ai-agent-tools-permissions-configuration",
    "mitre-atlas-mitigation-segmentation-of-ai-agent-components",
    "owasp-agentic-top10"
  ],
  "primary_citations_count": 12
}