Viewing profile — anand-tan

Absolutely. If the tools were only from Supabase, then yes, you could use Postgres roles. However, most people use a combination of tools (GitHub, Stripe, Linear, etc.), and each h…

For reference, this was the thread that led me to work on this. https://news.ycombinator.com/item?id=44502318

I wrote this after studying the Supabase MCP prompt injection issue. The blog shows how I built a working defense using an open-source AI agent runtime I’ve been building called Ta…

Tansive is an open-source platform to help teams securely integrate AI agents into real workflows. I posted Tansive this morning on Show HN to no response. So here I shamelessly ri…

This was precisely why I posted Tansive on Show HN this morning - https://news.ycombinator.com/item?id=44499658 MCP is generally a bad idea for stuff like this.

While experimenting with LLM-driven agents to automate DevOps tasks, I realized how easily a bad prompt could mess up a cluster so badly you’d have to redeploy everything. That's w…