Aidan Sochowski

Aidan Sochowski is a software engineer focused on connecting AI agents to company data while preserving access controls and recording agent activity. In October 2026, he was a founding senior platform engineer at Runlayer, which manages access to tools and data across employees’ AI clients.

Sochowski contributed to the Box–Runlayer partnership alongside colleagues from both companies and wrote its January 27, 2026 launch announcement. The integration brought Box’s official Model Context Protocol (MCP) server into the Runlayer Catalog, giving compatible AI clients a common interface for using Box’s tools. Employees can query documents, extract metadata and create folders through clients such as Claude, ChatGPT and Cursor. Runlayer enforces their existing Box permissions and logs interactions with Box content. It also adds checks for unauthorized access, prompt injection and tool poisoning, in which instructions planted in a tool’s description try to redirect an agent’s behavior.

Sochowski’s writing on agent infrastructure distinguishes running an agent from governing the connections employees make to company systems. He emphasizes the need to discover shadow MCPs: servers employees configure without IT approval. A gateway can enforce policies only on traffic routed through it. If an employee’s local MCP server connects directly to a production API, the gateway never sees the connection. This is why he argues for discovering MCP configurations on employees’ devices, alongside controls on approved connections.

He pairs that discovery with a catalog of reviewed servers and permissions tied to company accounts. For example, one employee can have read-only access to a tool while another has permission to write. Ease of adoption is part of the approach: employees can install approved servers without editing configuration files, keep their preferred AI clients and authenticate through company single sign-on.