What MITRE ATLAS Credentials from AI Agent Configuration (AML.T0083) - Adversarial Credentials from AI Agent Configuration threat to AI systems requires
This node addresses MITRE ATLAS technique AML.T0083 (Credentials from AI Agent Configuration). Adversaries may access the credentials of other tools or services on a system from the configuration of an AI agent. AI Agents often utilize external tools or services to take actions, such as querying databases, invoking APIs, or interacting with cloud resources. To enable these functions, credentials like API keys, tokens, and connection strings are frequently stored in configuration files. While there are secure methods such as dedicated secret managers or encrypted vaults that can be deployed to store and manage these credentials, in practice they are often placed in less protected locations for convenience or ease of deployment. If an attacker can read or extract these configurations, they may obtain valid credentials that allow direct access to sensitive systems outside the agent its... Defending against this technique is required under EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations; this node operationalises the documented ATLAS mitigations and cross-instrument controls into a deterministic verification workflow.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: 2b0f5cbf553d7d91cdc627d7726dd5baa689d59566d9170858765e2c785f5e52
Primary Citations — 7 traced to source
- MITRE ATLAS - Credentials from AI Agent Configuration (AML.T0083), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.T0083, AML.T0083 technique entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-credentials-from-ai-agent-configuration.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-credentials-from-ai-agent-configuration.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-credentials-from-ai-agent-configuration
- Back to registry: Browse all 10,099 compliance nodes