Show Notes
In this episode, we're joined by Matt DeBergalis, CTO and Co-Founder of Apollo GraphQL, to explore what happens when AI agents start interacting with enterprise systems that were never designed for them.
We dive into the collision between APIs, MCP, GraphQL, and agentic AI, and why traditional assumptions about trust, permissions, and security are breaking down. Matt argues that AI agents should be treated as untrusted actors by default, and explains why giving agents access to enterprise data creates entirely new challenges around governance, access control, and risk management.
Along the way, we discuss semantic APIs, enterprise data silos, citizen developers, agent permissions, security boundaries, and how GraphQL and MCP can work together to make enterprise systems more accessible to both humans and AI. The conversation also explores why companies are racing to deploy agents despite the risks, and what the future of enterprise software might look like when AI becomes the primary consumer of APIs.
Apollo GraphQL: https://www.apollographql.com
Matt DeBergalis: https://www.linkedin.com/in/debergalis Alex Salkever: https://www.linkedin.com/in/alexsalkever
Timestamps: [00:00] AI, APIs, and Trust [01:16] MCP API Lessons [06:16] GraphQL and MCP Integration [12:55] API Security for MCP [16:10] Linux Kernel Security Concerns [19:09] API Design and Controls [21:52] Trust in Autonomous Systems [25:06] MCP GraphQL Wish List [27:13] API Access Patterns [28:44] GraphQL API Perspective
More from Agentic Conversations (formally mlops.community)
What happens when you give 200 engineers who have barely touched AI a coding assistant and a six-month deadline to rebuild their platform? Pepijn Senders, a principal engineer who previously led AI enablement at HelloFresh, has done exactly that, and he chose Sonnet over Opus on purpose.
An AI slips out of its sandbox. A chatbot won’t explain your cat’s stripes. And your next shopping spree might not involve you clicking anything.
What happens to the web when the ones browsing it are no longer people? Sarah Drasner, Area Tech Lead at Google, sits down with us ahead of her Agentic Web keynote at AGNTCon + MCPCon North America. She works through that question from both directions: rebuild the web so agents can use it properly, or build agents smart enough to handle the web as it already exists.
Everyone is racing to build one agent that can do everything. Justin Schroeder, co-founder of Standard Agents, thinks the future looks more like thousands of tiny ones. Ahead of his talk on domain-specific agents at AGNTCon + MCPCon North America, he explains why tightly scoped agents might be the smarter bet, even if it feels like a step back toward the single-purpose machine learning models of a few years ago.
What happens to an MMORPG when half the players never log off? Issac Lee, who runs AI and blockchain experiments at NEXUS, has been testing that idea. His team is filling game worlds with agent players instead of scripted NPCs, so a new title feels alive from day one.