DEV Community

Hossein Hezami profile picture

Hossein Hezami

Web Developer

Location New York Joined Joined on  github website
Seven Year Club
Writing Debut
Six Year Club
Five Year Club
Four Year Club
Three Year Club
Two Year Club
One Year Club
The New Attack Surface: AI Agents With Access to APIs, Databases, and Shell Commands

The New Attack Surface: AI Agents With Access to APIs, Databases, and Shell Commands

6
Comments 1
15 min read

Want to connect with Hossein Hezami?

Create an account to connect with Hossein Hezami. You can also sign in below to proceed if you already have an account.

Already have an account? Sign in
What Should an AI Agent Be Allowed to Do Without Asking You?

What Should an AI Agent Be Allowed to Do Without Asking You?

7
Comments 2
12 min read
What Happens When an AI Agent Runs Longer Than Your HTTP Request?

What Happens When an AI Agent Runs Longer Than Your HTTP Request?

5
Comments 1
15 min read
MCP Made Tools Discoverable. It Didn't Make Them Safe

MCP Made Tools Discoverable. It Didn't Make Them Safe

7
Comments 3
16 min read
How I Would Design an n8n AI System That Can Recover From Its Own Failures

How I Would Design an n8n AI System That Can Recover From Its Own Failures

7
Comments 3
13 min read
n8n + RAG + MCP: Designing an AI Workflow That Knows Where Its Knowledge Comes From

n8n + RAG + MCP: Designing an AI Workflow That Knows Where Its Knowledge Comes From

6
Comments 1
12 min read
Can n8n Replace Your Backend for AI Workflows?

Can n8n Replace Your Backend for AI Workflows?

5
Comments
12 min read
Your n8n Workflow Has 40 Nodes. Should Any of Them Be an AI Agent?

Your n8n Workflow Has 40 Nodes. Should Any of Them Be an AI Agent?

5
Comments 1
12 min read
Agentic RAG Is Powerful Until the Retrieval Loop Eats Your Budget

Agentic RAG Is Powerful Until the Retrieval Loop Eats Your Budget

5
Comments 3
12 min read
The Retrieval Stack Nobody Shows You: Chunking, Reranking, Filtering, and Context

The Retrieval Stack Nobody Shows You: Chunking, Reranking, Filtering, and Context

5
Comments 1
12 min read
When RAG Gets Bigger, Accuracy Doesn't Always Get Better

When RAG Gets Bigger, Accuracy Doesn't Always Get Better

5
Comments 1
13 min read
RAG Has a Routing Problem: Knowing Which Knowledge Source to Trust

RAG Has a Routing Problem: Knowing Which Knowledge Source to Trust

7
Comments
13 min read
The Retrieval Pipeline Is Lying to You: How RAG Fails Before the LLM Sees Anything

The Retrieval Pipeline Is Lying to You: How RAG Fails Before the LLM Sees Anything

5
Comments 2
13 min read
Your RAG Retrieved the Right Document — So Why Was the Answer Wrong?

Your RAG Retrieved the Right Document — So Why Was the Answer Wrong?

5
Comments 2
11 min read
The Difference Between an AI Agent That Works and One You Can Trust

The Difference Between an AI Agent That Works and One You Can Trust

6
Comments 2
13 min read
The Agent Loop Nobody Talks About: Think, Act, Observe, Repeat

The Agent Loop Nobody Talks About: Think, Act, Observe, Repeat

6
Comments 1
14 min read
I Rebuilt My RAG Pipeline Without LangChain — What Got Better and What Got Worse

I Rebuilt My RAG Pipeline Without LangChain — What Got Better and What Got Worse

8
Comments 5
15 min read
Giving AI Agents the Same RBAC Rules as Your Users: Building a Laravel Permission Layer LLMs Actually Respect

Giving AI Agents the Same RBAC Rules as Your Users: Building a Laravel Permission Layer LLMs Actually Respect

5
Comments
11 min read
Building a Production RAG Pipeline with n8n, Qdrant, and Gemini: A Step-by-Step Walkthrough

Building a Production RAG Pipeline with n8n, Qdrant, and Gemini: A Step-by-Step Walkthrough

5
Comments
15 min read
Multi-Agent Orchestration in Laravel: Coordinating Specialists Instead of One Giant Prompt

Multi-Agent Orchestration in Laravel: Coordinating Specialists Instead of One Giant Prompt

6
Comments 3
15 min read
The Hidden Cost of AI Agents: A Token Budget Framework for Production Laravel Apps

The Hidden Cost of AI Agents: A Token Budget Framework for Production Laravel Apps

6
Comments 1
16 min read
Why Better Prompts Won't Save Your Broken AI Agent

Why Better Prompts Won't Save Your Broken AI Agent

5
Comments
14 min read
Why AI Agents Need an Evaluation Loop, Not Another Better Prompt

Why AI Agents Need an Evaluation Loop, Not Another Better Prompt

5
Comments
14 min read
The Next RAG Problem Isn’t Retrieval — It’s Knowing When Not to Retrieve

The Next RAG Problem Isn’t Retrieval — It’s Knowing When Not to Retrieve

5
Comments 2
13 min read
RAG vs Memory vs Tools: What Information Should an AI Agent Actually Store?

RAG vs Memory vs Tools: What Information Should an AI Agent Actually Store?

6
Comments 3
16 min read
n8n: When AI Writes the Workflow, Who Reviews the Workflow?

n8n: When AI Writes the Workflow, Who Reviews the Workflow?

5
Comments
15 min read
n8n Can Now Build Its Own Workflows — What Could Possibly Go Wrong?

n8n Can Now Build Its Own Workflows — What Could Possibly Go Wrong?

5
Comments 2
15 min read
From Prompt Engineering to Context Engineering: The Skill AI Developers Actually Need

From Prompt Engineering to Context Engineering: The Skill AI Developers Actually Need

7
Comments 2
16 min read
GPT-6 vs. Claude 5.1 vs. Gemini 4: A Code Test

GPT-6 vs. Claude 5.1 vs. Gemini 4: A Code Test

5
Comments
16 min read
When an AI Agent Makes a Mistake in Production, Which Layer Should Stop It?

When an AI Agent Makes a Mistake in Production, Which Layer Should Stop It?

6
Comments 3
15 min read
From API to AI Agent: Turning a Laravel Backend Into a Tool-Using System

From API to AI Agent: Turning a Laravel Backend Into a Tool-Using System

5
Comments
11 min read
Why Most AI Agents Fail Long Before the Model Does

Why Most AI Agents Fail Long Before the Model Does

5
Comments
14 min read
RAG Solved the Wrong Problem: What Actually Makes AI Applications Reliable?

RAG Solved the Wrong Problem: What Actually Makes AI Applications Reliable?

5
Comments
15 min read
10 Vue Performance Mistakes That Only Show Up at Scale

10 Vue Performance Mistakes That Only Show Up at Scale

5
Comments
13 min read
10 Practical Things You Can Build With n8n and MCP

10 Practical Things You Can Build With n8n and MCP

5
Comments
13 min read
7 Production Patterns for Building Reliable AI Agents in Laravel

7 Production Patterns for Building Reliable AI Agents in Laravel

5
Comments 1
11 min read
Building Production-Ready AI Agents in Laravel

Building Production-Ready AI Agents in Laravel

6
Comments 1
15 min read
Why Most AI Agents Fail in Production

Why Most AI Agents Fail in Production

6
Comments 6
15 min read
10 Laravel Architecture Mistakes That Look Fine Until Your App Starts Growing

10 Laravel Architecture Mistakes That Look Fine Until Your App Starts Growing

5
Comments
10 min read
Vue vs React: The Things Developers Notice After Building Real Applications

Vue vs React: The Things Developers Notice After Building Real Applications

2
Comments
12 min read
When Should You Use n8n Instead of Writing the Code Yourself?

When Should You Use n8n Instead of Writing the Code Yourself?

20
Picked as gem Comments 5
15 min read
n8n + MCP: What Happens When AI Can Build Its Own Workflows?

n8n + MCP: What Happens When AI Can Build Its Own Workflows?

8
Comments 5
19 min read
GPT-5.6 vs Gemini 3.8 vs Claude 5.1: Which AI Is Actually Better for Coding in 2026?

GPT-5.6 vs Gemini 3.8 vs Claude 5.1: Which AI Is Actually Better for Coding in 2026?

2
Comments
20 min read
The Life of a Permission Check: Following One Request Through 14 Layers of Authorization

The Life of a Permission Check: Following One Request Through 14 Layers of Authorization

2
Comments 1
10 min read
7 Authorization Architectures in the Wild — How to Pick the Right One for Your Laravel App

7 Authorization Architectures in the Wild — How to Pick the Right One for Your Laravel App

2
Comments 1
8 min read
The 5 Levels of Laravel Authorization: From Basic RBAC to ABAC, Role Hierarchy & Multi-Tenancy (2026 Edition)

The 5 Levels of Laravel Authorization: From Basic RBAC to ABAC, Role Hierarchy & Multi-Tenancy (2026 Edition)

1
Comments
7 min read
Building a Multi-Tenant SaaS Authorization System in Laravel: A Complete Step-by-Step Guide (RBAC + ABAC + Teams)

Building a Multi-Tenant SaaS Authorization System in Laravel: A Complete Step-by-Step Guide (RBAC + ABAC + Teams)

1
Comments
8 min read
5 Laravel Authorization Problems You're Probably Facing (And How to Solve Them in 2026)

5 Laravel Authorization Problems You're Probably Facing (And How to Solve Them in 2026)

2
Comments
10 min read
Moving Beyond TOTP: Why the PulseProof Sentinel (PPS) Protocol is the Future of Offline Authentication

Moving Beyond TOTP: Why the PulseProof Sentinel (PPS) Protocol is the Future of Offline Authentication

2
Comments 1
4 min read
Beyond Passkeys and OTP: Why I Built a Protocol for the Authentication Gaps We Keep Ignoring

Beyond Passkeys and OTP: Why I Built a Protocol for the Authentication Gaps We Keep Ignoring

1
Comments
6 min read
TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

TOTP Secrets Are a Liability: Meet PPS, an Asymmetric Authentication Protocol for PHP and Laravel

1
Comments
6 min read
Master Role-Based Access Control with Laravel Permission Manager

Master Role-Based Access Control with Laravel Permission Manager

2
Comments
5 min read
Build Laravel AI Features in Minutes: A Guide to the Gemini Package

Build Laravel AI Features in Minutes: A Guide to the Gemini Package

1
Comments
2 min read
TOTP Authenticator: A Lightweight PHP Library for Secure Two-Factor Authentication

TOTP Authenticator: A Lightweight PHP Library for Secure Two-Factor Authentication

6
Comments
2 min read
loading...