# Databricks Unity Gateway Cut $1.2M Agent Waste
_Databricks found seven MCP bugs wasting $1.2M a year and fixed them in an hour using Unity Gateway traces and Genie One._
**Published:** 2026-09-01
**Source:** https://www.startuphub.ai/cybersecurity/databricks-unity-gateway-cut-1-2m-agent-waste
---
[Databricks](https://www.databricks.com/blog/how-we-eliminated-1-million-year-wasted-ai-agent-spend-one-hour) traced roughly $1.2 million a year in wasted spend to seven MCP bugs. Engineers fixed them in about an hour using Databricks Unity Gateway and Genie One.

The trouble sat in internal Jira and [Google](https://www.startuphub.ai/ai-news/ai-research/2026/google-enhances-ai-video-with-omni-1-1-flash) Drive and Docs tool servers. No remote exploit was needed. Any agent that sent a plausible JSON type could kick off the loop.

## How the attack actually works

Unity Gateway spits out an OpenTelemetry trace for every MCP call, capturing tool name, arguments, errors, tokens and latency. Genie One queried that table in plain English and ranked failures by volume and cost.

The worst offender logged 535 failures a day. It triggered when the model sent an array for the fields parameter instead of a comma string. The server called .split() on a list, threw "'list' object has no attribute 'split'", and the agent retried for 12 turns on average. Picture a vending machine that only takes exact change and jams. The user does not walk away. They shake it, try again, burn time and money.

## Why this matters, and what it does not fix

The pattern is quiet. Tasks still complete, so aggregate dashboards read it as healthy usage growth. At [Databricks](https://www.startuphub.ai/startups/databricks), it added up to 1,409 errors a day, $499K in annual token waste and 12,023 hours of wait time, with one Drive error hitting 49.6% of drive_file_get calls.

Recovery cost tracked error quality. Clear messages like "find_text and replace_text required" recovered in 4.6 turns with a 14% repeat rate. Cryptic tracebacks took 12.1 turns, and misleading kwargs hit a 50% repeat rate. Builders should coerce inputs and return actionable errors, and keep tracing on. Without the gateway on the call path, there is nothing to query.
---
Original analysis from [startuphub.ai](https://www.startuphub.ai), the #1 AI startup directory.