high-risk field
A part of a site whose change could redirect money, logins or data: the payment processors on the checkout, where the checkout actually goes, crypto addresses printed on the page, the OAuth server, mail servers and MCP endpoints. A change in one of them is held for the owner to confirm before agents transact.
What high-risk field does not show
A change is not proof of an attack; most are legitimate, which is why the owner confirms.
Related terms in Security and privacy
Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
lookalike domain · homoglyph · incident switch · Indirect prompt injection · Direct prompt injection · Jailbreak · Data exfiltration · Sensitive information disclosure · Secret leakage · Insecure output handling · Excessive agency · Least privilege · Trust boundary · Input validation · Output validation · Allowlist · Denylist · SSRF · RCE · Credential scope · OAuth scope · API key · Bearer token · mTLS · Rate-limit policy · Audit log · PII · Data minimization · Purpose limitation · Retention period · Data residency · Tenant isolation · Threat model · DMARC · DMARC alignment · SPF · DKIM · MTA-STS · TLS-RPT · CAA record · DNSSEC · hard bounce
Questions about high-risk field
What is high-risk field?
A part of a site whose change could redirect money, logins or data: the payment processors on the checkout, where the checkout actually goes, crypto addresses printed on the page, the OAuth server, mail servers and MCP endpoints. A change in one of them is held for the owner to confirm before agents transact.
What does high-risk field not show or guarantee?
A change is not proof of an attack; most are legitimate, which is why the owner confirms.
Which area of the glossary does high-risk field belong to?
Security and privacy: Where an agent, a tool or a page can be turned against its operator, and the controls that limit the damage without proving safety.
← incident switch · Indirect prompt injection →
See it in the full glossary · 731 terms across 19 areas.