MCP Gateway (AI Agent Gateway) incident fields

The following fields are shown on the incident Properties tab for the MCP Gateway (AI Agent Gateway) channel. Fields common to all incidents, such as severity, status, and incident time, are not repeated here.

Field Value
Action The action that should take place in case of a breach (the expected action, and not the actual action that took place).
Channel MCP Gateway. In the incident list column, the operation is appended in brackets.
Operation User/AI Agent request or MCP connector response.
Analyzed by Data Protection Service
Detected by MCP Gateway Connector
Source The user email address, or the AI agent name together with the agent owner.
Destination The MCP connector name.
Attachments Forensics details captured.
Note: Incident notifications sent to the source cannot reach an AI agent, because agents have no email address. For policies that cover agent traffic, add policy owners or specific administrator addresses as notification recipients.