https://cybertoolchain.io/tools/operant-ai New releases and features in Operant AI, tracked by The Cyber Toolchain. en Sat, 24 Oct 2026 07:55:45 GMT https://www.operant.ai/art-kubed/the-season-of-agentic-commerce-is-here-are-you-ready https://www.operant.ai/art-kubed/the-season-of-agentic-commerce-is-here-are-you-ready Sat, 24 Oct 2026 07:55:45 GMT Operant AI launches Agentic Commerce Defense to detect and block malicious agent transactions in real time.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces Agentic Commerce Defense, a new runtime protection layer that distinguishes legitimate shopping agents (e.g., Meta Muse, OpenAI Dots) from scalper fleets, scrapers, and rogue agents at checkout.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds loop detection that identifies a paid API call repeating without progress, stopping runaway token and dollar spend from misbehaving pricing or merchandising agents. • Adds per-agent token limits that can throttle a single misbehaving agent independently without affecting other agent instances. • Supports runtime behavioral analysis that tracks agent activity across a full session to identify coordinated fleet behavior distinct from a single genuine shopper's intent. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/operant-ai https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce Fri, 16 Oct 2026 07:47:44 GMT Operant AI: Adds task-aware payment gating that blocks paid tool calls inconsistent with the user-assigned task. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/operant-ai https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce-across-the-3-most-popular-protocols---x402-mpp-and-ap2 https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce-across-the-3-most-popular-protocols---x402-mpp-and-ap2 Thu, 15 Oct 2026 07:43:05 GMT Operant Agent Protector adds Agentic Commerce Defenses and Semantic Firewall covering x402, MPP, and AP2 payment protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Agentic Commerce Defenses to Operant Agent Protector, evaluating each agent payment attempt — combining task context, paid tool call, MCP server identity, payment destination, amount, and org policy — before forwarding, across the `x402`, `MPP`, and `AP2` protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces task-aware payment gating that blocks payments when the paid tool call falls outside the agent's assigned task, even when credentials are valid and the amount is within budget. • Introduces commercial scope controls that let organizations define approved MCP servers, payment networks, assets, and wallet destinations, blocking payments to unapproved destinations regardless of credential validity. • Adds purse-string spending limits applicable by agent, service, MCP server, user, team, network, and asset, with `hourly`, `daily`, `weekly`, or `monthly` windows; budget is reserved atomically before forwarding so concurrent agents cannot double-spend the same allowance. • Introduces the Operant Semantic Firewall, which evaluates paid tool activity against the session's original task to flag prompt injection, task drift, or payment loops even when individual transactions are properly authorized and under budget. • Adds audit logging of payment requests, policy decisions, submissions, and reported outcomes without storing payment proofs or signing transactions, so Operant never holds custody of customer wallet keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/operant-ai https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce-across-the-3-most-popular-protocols---x402-mpp-and-ap2 https://www.operant.ai/art-kubed/stop-dollar-exfiltration-operant-agent-protector-now-defends-agentic-commerce-across-the-3-most-popular-protocols---x402-mpp-and-ap2 Thu, 15 Oct 2026 07:43:05 GMT Operant Agent Protector adds Agentic Commerce Defenses and Semantic Firewall covering x402, MPP, and AP2 payment protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Agentic Commerce Defenses to Operant Agent Protector, evaluating each agent payment attempt — combining task context, paid tool call, MCP server identity, payment destination, amount, and org policy — before forwarding, across the `x402`, `MPP`, and `AP2` protocols.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces task-aware payment gating that blocks payments when the paid tool call falls outside the agent's assigned task, even when credentials are valid and the amount is within budget. • Introduces commercial scope controls that let organizations define approved MCP servers, payment networks, assets, and wallet destinations, blocking payments to unapproved destinations regardless of credential validity. • Adds purse-string spending limits applicable by agent, service, MCP server, user, team, network, and asset, with `hourly`, `daily`, `weekly`, or `monthly` windows; budget is reserved atomically before forwarding so concurrent agents cannot double-spend the same allowance. • Introduces the Operant Semantic Firewall, which evaluates paid tool activity against the session's original task to flag prompt injection, task drift, or payment loops even when individual transactions are properly authorized and under budget. • Adds audit logging of payment requests, policy decisions, submissions, and reported outcomes without storing payment proofs or signing transactions, so Operant never holds custody of customer wallet keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/operant-ai https://www.operant.ai/art-kubed/announcing-operants-coverage-for-microsoft-copilot-and-every-ai-assistant-embedded-in-microsoft-365 https://www.operant.ai/art-kubed/announcing-operants-coverage-for-microsoft-copilot-and-every-ai-assistant-embedded-in-microsoft-365 Thu, 01 Oct 2026 07:35:20 GMT Operant adds Microsoft 365 AI coverage: Purview-backed Copilot observability, inline Agents SDK protection, and label-aware plugin blocking.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a Microsoft Purview integration that ingests every Copilot prompt, response, and tool call across all Microsoft 365 Copilot surfaces for detection and audit.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Agent Protector integration into the Microsoft 365 Agents SDK runtime, evaluating each tool invocation, retrieved content, outbound call, and write action inline before it executes. • Adds prompt-level observation, detection, and blocking for third-party assistants (such as Harvey and Rogo) embedded in Microsoft 365 on the web, blocking individual violating prompts while allowing the session to continue. • Adds label-aware plugin blocking that uses existing Microsoft Purview sensitivity labels to block specific AI vendors or plugins from accessing documents based on classification rules. • Detects sensitive data exposure (PII, PHI, PCI, credentials, source code, MNPI) in Copilot prompts, grounded content, and responses via the Purview integration. • Detects oversharing through Copilot grounding, flagging responses that draw on content outside the user's normal working set. • Detects indirect prompt injection in retrieved content — including instructions hidden in emails and documents — before they enter an agent's context. • Detects anomalous agent and tool activity, including unusual plugin invocations, retrieval volume spikes, and agents acting outside their declared purpose. • Detects jailbreak and policy evasion attempts correlated across sessions and users rather than evaluated per prompt. • Detects loop behavior anomalies in Agents SDK agents — iteration counts, retries, and sudden plan changes — as signals of agent redirection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/operant-ai