Subscribe
Get The Permission Layer by email
A free email on AI agent governance for the people who approve agent access. It covers agent identity, permissions, Model Context Protocol (MCP) security and spend, and it takes about five minutes to read. It goes out at least once a week, with special editions when something big happens.
Free, at least once a week
One field. You confirm the address by email, and you get the next issue.
You confirm by email. Unsubscribe in one click.
What lands in your inbox
From Issue #3 on, every regular issue has the same five sections, in this order.
- The Week in Control
- 5 to 8 stories on agent identity, permissions, MCP security, data flow and spend. Each one ends with why it matters for a decision you own.
- One Deep Thing
- The one story or theme worth unpacking that week: a spec change, how an incident happened, or a buying question.
- Landscape Watch
- Changes to the vendor landscape map, such as funding, launches and acquisitions, each with an evidence link.
- New Tools
- Up to four AI agent governance products from the new tools list that vendors announced in the two weeks before the issue, each with a source link.
- Spend Signal
- Model and infrastructure pricing changes, and what they do to a monthly bill at realistic volume.
Who it's written for
The people who sign off on what agents may touch: CISOs and security architects, platform and DevOps engineers running MCP servers, and AI leads asked to approve agent deployments faster than the tooling is maturing. It is also useful for founders, investors and finance leads tracking the category.
Check the work first
The reference work behind the briefing is public. Read some of it before you decide.
- Issue #3: Wells Fargo puts agent payment risk on you, the latest issue (October 23, 2026).
- The AI agent incident database: 100 incidents, each with its sources listed (209 in all).
- The vendor landscape map: 76 vendors in 14 categories. Inclusion is never paid.
- The tools directory: 114 products for governing AI agents from 91 vendors, in 13 categories. Inclusion is never paid.
- Questions to ask AI agent security vendors: 50 questions to copy into a request for proposal or a security questionnaire.
- The glossary: 50 terms defined in plain English.
- The explainers: 10 pages, each answering one question in full.
No one can buy coverage
Sponsors never see an issue before it goes out, and they cannot buy coverage, rankings or a place on the map. Sponsored units are always labeled SPONSORED. The full rules are in the editorial policy.
We never sell or share the subscriber list, and every email has a one-click unsubscribe.
Get the next issue in your inbox
Free, at least once a week. You confirm by email.