Verity: Open-Source MCP Server Tackles Permission Leaks in Agent Memory
mattyboombalatti · reddit · 2026-08-06
A developer released Verity (Apache-2.0), a self-hostable MCP server designed to solve critical permission leakage issues in AI agent memory layers.
The Core Problem
When an agent reads a permission-protected document and writes a summary into shared memory, the derived memory often loses the original Access Control List (ACL). This allows agents from other tenants to retrieve sensitive info via normal semantic search without any jailbreaks or malicious tool calls.
The Solution
- Underlying Permission Filter: Verity runs permission checks below the agent and MCP client. The caller's identity and permissions are compiled directly into the retrieval query as a mandatory pre-filter. If a user cannot access a row, it never enters the retrieval candidate set.
- Native Permission Sync: Permissions originate directly from source systems (Google Drive, SharePoint/Entra, Salesforce) instead of manual tagging. Revoking a share or removing a user stops data retrieval after the next sync.
- Fail Closed: If Verity cannot resolve the caller's scope, retrieval returns nothing.
Current State
The project is in v0.1. Permission propagation is sync-based with a few minutes of lag. The author has planted sentinel facts across tenants with zero cross-tenant retrievals so far, though it hasn't undergone a third-party security audit yet.
Related event: Open-Source Verity Tackles AI Agent Memory Access Control(3 posts)→
More from coding & agent
- Developer Shares Practical Workflow OS for Claude Code and Codex — thatroblennon · 2026-08-06
- Smart LLM Routing Cuts Inference Costs by 65% While Maintaining 99.2% Accuracy — shensi · 2026-08-06
- Dev Frustrations: Claude Code and Codex Reported as Slow with Poor Output — trybullet · 2026-08-06
- Ryan Dahl's celld brings Durable Objects to any environment, a breakthrough for cloud agents — joecole · 2026-08-06
- Are model providers all using LiteLLM or Bifrost under the hood? — brianmichel · 2026-08-06
- Replace regex with ProgramAsWeights: one-liner email validation — yuntiandeng · 2026-08-06