What MITRE ATLAS Mitigation AI Agent Tools Permissions Configuration (AML.M0028) - AI Agent Tools Permissions Configuration requires
This node operationalises MITRE ATLAS mitigation AML.M0028 (AI Agent Tools Permissions Configuration). When deploying tools that will be shared across multiple AI agents, it is important to implement robust policies and controls on permissions for the tools. These controls include applying the principle of least privilege along with delegated access, where the tools receive the permissions, identities, and restrictions of the AI agent calling them. These configurations may be implemented either in MCP servers which connect the agents to the tools calling them or, in more complex cases, directly in the configuration files of the tool. It maps the mitigation to EU AI Act, NIST AI RMF, and ISO/IEC 42001 obligations and drives a 10-gate verification workflow that an AI agent can execute against any production system.
Pillar: AI Governance & Law · Authority: MITRE Corporation · Version: 1.0.1 · Last updated:
Primary source: https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml
SHA-256 integrity: 4650064710e44b78eb13cd84e8f40b5f3a6537da8eed68579bff5d6dc5a83ed2
Primary Citations — 6 traced to source
- MITRE ATLAS - AI Agent Tools Permissions Configuration (AML.M0028), https://raw.githubusercontent.com/mitre-atlas/atlas-data/main/dist/ATLAS.yaml#AML.M0028, AML.M0028 mitigation entry, 2026
- EU AI Act - Regulation (EU) 2024/1689 on Artificial Intelligence, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689, Article 15 (Accuracy, Robustness, Cybersecurity), 2024
+ 4 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/mitre-atlas-mitigation-ai-agent-tools-permissions-configuration.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/mitre-atlas-mitigation-ai-agent-tools-permissions-configuration.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/mitre-atlas-mitigation-ai-agent-tools-permissions-configuration
- Back to registry: Browse all 10,108 compliance nodes