AI coding agents do not behave like human operators. They parse every secret a human would ignore, cache it in a context window, and transmit it across API boundaries.
Session-level controls, built for people who forget what they read, stop working the moment a model joins the execution path. This white paper identifies the three risks that converge when Claude Code gets API connectivity, maps each one to a protocol-level control, and walks through the gateway architecture that lets AI agents operate against live infrastructure without exposing credentials, PII, or running unaudited, destructive commands.
Get started
See hoop.dev in action
One gateway for every database, container, and AI agent. Deploy in minutes.