Databricks curbs AI agent dangers

Databricks Unity Catalog introduces granular control and logging for AI agents, preventing unauthorized actions and providing a complete audit trail.

8 min read
Databricks logo with abstract AI network background
Databricks enhances AI agent security with Unity Catalog.

The era of autonomous AI agents making critical decisions in production is here, bringing with it significant risks. Incidents of agents destructively wiping databases or deleting vast amounts of data are no longer theoretical, even when agents operate within their granted permissions. The core issue: a lack of control over which tools agents can access and no record of their actions.

Visual TL;DR. AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog enables Granular control. Databricks Unity Catalog provides Complete audit trail. Granular control leads to Curbs AI agent dangers. Complete audit trail enables Curbs AI agent dangers.

  1. AI agent dangers: autonomous agents making critical decisions in production
  2. Unrestricted tool access: agents had access to all available functions without fine-grained control
  3. Invisible agent actions: tool calls were absent from standard logs, leaving no audit trail
  4. Databricks Unity Catalog: extends governance to all connected tools, mirroring data management
  5. Granular control: restricting write access or limiting administrative functions to specific users
  6. Complete audit trail: providing a complete record of all agent actions and tool calls
  7. Curbs AI agent dangers: preventing unauthorized actions and providing a complete audit trail
Visual TL;DR
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog provides Complete audit trail. Complete audit trail enables Curbs AI agent dangers addresses with provides enables AI agent dangers Unrestricted tool access Invisible agent actions Databricks Unity Catalog Complete audit trail Curbs AI agent dangers From startuphub.ai · The publishers behind this format
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog provides Complete audit trail. Complete audit trail enables Curbs AI agent dangers addresses with provides enables AI agent dangers Unrestricted toolaccess Invisible agentactions Databricks UnityCatalog Complete audittrail Curbs AI agentdangers From startuphub.ai · The publishers behind this format
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog provides Complete audit trail. Complete audit trail enables Curbs AI agent dangers addresses with provides enables AI agent dangers autonomous agents making criticaldecisions in production Unrestricted tool access agents had access to all availablefunctions without fine-grained control Invisible agent actions tool calls were absent from standard logs,leaving no audit trail Databricks Unity Catalog extends governance to all connected tools,mirroring data management Complete audit trail providing a complete record of all agentactions and tool calls Curbs AI agent dangers preventing unauthorized actions andproviding a complete audit trail From startuphub.ai · The publishers behind this format
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog provides Complete audit trail. Complete audit trail enables Curbs AI agent dangers addresses with provides enables AI agent dangers autonomous agentsmaking criticaldecisions in… Unrestricted toolaccess agents had accessto all availablefunctions without… Invisible agentactions tool calls wereabsent fromstandard logs,… Databricks UnityCatalog extends governanceto all connectedtools, mirroring… Complete audittrail providing acomplete record ofall agent actions… Curbs AI agentdangers preventingunauthorizedactions and… From startuphub.ai · The publishers behind this format
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog enables Granular control. Databricks Unity Catalog provides Complete audit trail. Granular control leads to Curbs AI agent dangers. Complete audit trail enables Curbs AI agent dangers addresses with enables provides leads to enables AI agent dangers autonomous agents making criticaldecisions in production Unrestricted tool access agents had access to all availablefunctions without fine-grained control Invisible agent actions tool calls were absent from standard logs,leaving no audit trail Databricks Unity Catalog extends governance to all connected tools,mirroring data management Granular control restricting write access or limitingadministrative functions to specific users Complete audit trail providing a complete record of all agentactions and tool calls Curbs AI agent dangers preventing unauthorized actions andproviding a complete audit trail From startuphub.ai · The publishers behind this format
Visual TL;DR — startuphub.ai AI agent dangers leads to Unrestricted tool access. Unrestricted tool access leads to Invisible agent actions. Invisible agent actions addresses with Databricks Unity Catalog. Databricks Unity Catalog enables Granular control. Databricks Unity Catalog provides Complete audit trail. Granular control leads to Curbs AI agent dangers. Complete audit trail enables Curbs AI agent dangers addresses with enables provides leads to enables AI agent dangers autonomous agentsmaking criticaldecisions in… Unrestricted toolaccess agents had accessto all availablefunctions without… Invisible agentactions tool calls wereabsent fromstandard logs,… Databricks UnityCatalog extends governanceto all connectedtools, mirroring… Granular control restricting writeaccess or limitingadministrative… Complete audittrail providing acomplete record ofall agent actions… Curbs AI agentdangers preventingunauthorizedactions and… From startuphub.ai · The publishers behind this format

Databricks is addressing this gap with new capabilities in its Unity Catalog, aimed at securing agent actions. The platform now extends governance to all connected tools, mirroring how data itself is managed.

The problem: Unrestricted access, invisible actions

Traditionally, if an AI agent was authorized to connect to a toolset, it had access to all available functions. This meant no fine-grained control, like restricting write access or limiting administrative functions to specific users. Crucially, when things went wrong, there was no audit trail.

Related startups

Tool calls were absent from standard logs, leaving no record of what an agent did, with what parameters, or on whose behalf. This blindness makes it impossible to prevent unintended consequences or investigate incidents after they occur.

The solution: Unity Catalog MCP governance

Databricks is introducing granular control and comprehensive logging for AI agents through Unity Catalog MCP governance. This allows administrators to define precise rules for how agents interact with external tools, known as Managed Cloud Platform (MCP) tools.

Service policies, written in SQL, enable administrators to specify exactly which tools an agent can call and under what conditions. These policies can evaluate arguments and context, blocking or requiring consent for specific actions.

This is a significant step towards agentic AI security, preventing unauthorized agent behavior.

How it works

Administrators define service policies as SQL functions within Unity Catalog. These functions take the caller (actor) and the requested action (context) as input, returning an allow or deny decision with a reason.

For example, a policy could block all file deletion requests or permit merging pull requests only for approved engineers.

Once defined, these policies are attached to MCP services via the Databricks AI Gateway service policies. The gateway enforces these rules in real time for every tool call.

Simultaneously, all tool interactions are captured as entries in a Delta table within Unity Catalog. This includes the tool name, arguments, result, user identity, and whether the call was allowed or denied, providing a complete, queryable audit log.

This capability is currently available in gated beta, extending existing data governance principles to the realm of AI agents.

© 2026 StartupHub.ai. All rights reserved. Do not enter, scrape, copy, reproduce, or republish this article in whole or in part. Use as input to AI training, fine-tuning, retrieval-augmented generation, or any machine-learning system is prohibited without written license. Substantially-similar derivative works will be pursued to the fullest extent of applicable copyright, database, and computer-misuse laws. See our terms.