Page 215 - CyberSecurityEssentialsEnglish

through prepared connectors to common applications. Some arrive through a standard
access layer, an agreed interface that lets any compliant model connect to any compliant
tool without bespoke integration. The best known example is the Model Context Protocol,

usually abbreviated MCP, an open specification that describes how a tool announces what
it offers and how a model requests it. A standard layer reduces integration work, but it also

widens the surface that must be reviewed, because every server added to it is a new route
into the organization. Some are reached by handing the agent a workflow automation
platform, so that one call triggers a chain of steps. And some involve no interface at all: the

agent operates a browser or a screen directly, clicking and typing as a person would.

That last route deserves particular care. An agent that operates a screen inherits whatever
the signed-in account can do, and it leaves a much poorer record than a call to a defined
interface. It should be treated as the highest-privilege route available, restricted to a

dedicated account with narrow rights, and used only where no defined interface exists.

⚠ An operational warning for a multi-tool agent
The more autonomous an agent becomes, and the more tools it uses, the greater the
need for logging, permission limits, cost ceilings, and the ability to stop it. Do not
measure an agent by how impressive its plan looks, but by whether every action it takes
can be traced, explained, and undone.

● Remember: Section summary
• Key idea: AI is one step inside a system made of several kinds of step.
• Practical decision: Choose the simplest pattern that achieves the result, with clear
stopping points.
• Mistake to avoid: Using a language model for calculations and rules, or a complex agent
for a fixed task.

Video: Agents, Orchestrators, and MCP
An explanation of the coordinator that
distributes work across several tools or agents

inside a workflow.
Duration: 20:51 | Level: Intermediate
Learning objective: Tell fixed automation apart

from a multi-tool agentic workflow.

Source: IBM Technology [15].
https://youtu.be/Ons1Fv3IE4U

Verified: June 6, 2026

214