Kristina Baldovino

Before the Provider Call: Enforcing Exact-Term Authorization for State-Changing Tool Actions

This working paper examines a narrow but consequential WebMCP question: what happens between an AI agent proposing a state-changing action and a provider executing it? Across a controlled 576-run study spanning Claude, Gemini, and GPT, the baseline condition produced 165 unauthor...