Unverified50% confidenceFactExact time
Identity propagation means the caller's identity information is carried intact across the service-to-service call chain rather than being dropped at some hop or replaced with the service's own identity; if the identity is lost, auditing and permission re-checks based on the original caller become impossible.
1
Sources
50%
Confidence
Long-term
Relevance
10/28/2026
First Seen
Sources
Connecting an AI Agent to an MCP Server ≠ Full Tool Access
youtubeNón Lá Dev10/28/2026
Related Entities
Related Claims
Unverified托管身份（Managed Identity）是Azure平台为运行在其上的服务自动颁发和轮换凭据的机制，凭据从不以明文形式出现在代码或配置文件中78% similarUnverifiedIdentity propagation must occur on the trusted server side, and frontend or user-controllable parameters must never be allowed to determine the scope of data access.71% similarUnverifiedA correlation ID is a unique identifier generated at the request entry point or inherited from upstream, passed hop by hop in the request header and written to each layer's structured logs, used to reconstruct the cross-service call chain70% similarUnverifiedDe-identification only removes direct identifiers, whereas true anonymization requires that individuals cannot be re-identified even when combined with external datasets.70% similarUnverifiedService accounts are machine accounts for non-human identities, typically granted long-lived keys for service-to-service calls, and they are often over-privileged, difficult to rotate, and not bound to a specific person; once obtained by an Agent, they become a ghost identity with no MFA, no behavioral baseline, and the ability to lurk long-term.69% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1107034API
curl https://kongchang.com/api/v1/knowledge/claims/1107034MCP
get_claim(id=1107034)