The world's infrastructure is not ready because we are so used to writing pieces of deterministic code where say a CI/CD pipeline is going to take input A and we know that we want to get it to output B. But now we're starting to live in a world where we are giving a non-deterministic agent or LLM or what have you the ability to make decisions on our behalf and that is destructive potentially.

One of the problems if you don't provide limited access is that agentic AI is sort of like a toddler. It will probe all of your systems. It might rm-rf delete your root directory. It might dump your database. If you give the permissions, the LLM will use this permissions that you've given it.

Certificate-based authentication is very very powerful. I can create cryptographic footprint and let's call it passport of who you are in that moment. And in that piece of cryptographic identity, I can define who you are, how long I believe you should exist and be able to function and accomplish your work. So the ephemeral nature of how certificate-based authentication works makes it prime for the effective use in AI workloads. Your AI is non-deterministic. Being able to dynamically scope its work on every single task that it does is crucial. Being able to define what it should do even though it may change every time it runs is paramount.

It has been about a year since Anthropic released MCP to the world and through its ability to provide context to LLMs and to workloads, it has seen large adoption in the community. The issue is with any young protocol, it does not provide all the enterprise features that are necessary to deploy it at scale. Out of the box, the protocol did not have an answer for any of the OWASP top 10 AI and agentic threats. Teleport released secure MCP about 6 months after the protocol's initial release. And through our existing foundation and bedrock of how we solve the identity problem and the access problem as an extension, we're able to cover five to six of the top 10 threats that AI is facing according to all of us.

Sam Altman was on the KubeCon stage I believe about six years ago and he declared that Kubernetes is going to be the AI platform and he's not wrong. OpenAI has been very vocal about how they run ChatGPT on Kubernetes, how everything that they do is Kubernetes first. Kubernetes has become the backbone of most modern infrastructure and most modern applications that we touch in our daily lives and being able to define the access not only to Kubernetes itself but utilize the same tools to define the access of the AI that is going to be running on that platform becomes invaluable. Giving you the easy button to Kubernetes access, to giving you the easy button to defining roles, to defining the who, the what, the why, the how of Kubernetes for humans and utilizing the exact same technologies, the exact same knobs for the AI workloads that will run on Kubernetes.