When AI Agents Go Off Track with Or Weis

About this episode

Today, we have Or Weis, Co-Founder and CEO at Permit.io, on the show! Or has spent over two decades in software engineering and is now building tools to help developers manage authorization and access control as AI agents become an increasingly important part of software systems. In this episode, we explore how AI agents are changing the way we think about identity, authentication, and authorization. Or explains why agents can’t simply be treated like human users or traditional machine identities, and how their unpredictable and autonomous behavior introduces new security challenges, from prompt injection attacks to the confused deputy problem. We also dive into the Model Context Protocol (MCP), why delegated access requires a different approach to security, and the shift from session-based permissions to action-level authorization. Or walks us through Permit.io’s MCP Gateway and introduces the concept of agentic intent—how organizations can track changes in an agent’s intended actions and intervene when its behavior starts drifting from the original task. Finally, we discuss how enterprises are navigating the transition to agentic workflows, the challenges of connecting AI agen