{"id":8308,"date":"2026-10-16T15:04:11","date_gmt":"2026-10-16T15:04:11","guid":{"rendered":"https:\/\/kanhasoft.com\/blog\/?p=8308"},"modified":"2026-10-16T15:04:24","modified_gmt":"2026-10-16T15:04:24","slug":"ai-agent-security-crm-erp","status":"publish","type":"post","link":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/","title":{"rendered":"AI Agents Are Entering CRM &#038; ERP Systems &#8211; But Who Controls What They Can Do?"},"content":{"rendered":"<p><span style=\"font-weight: 400;\">AI agents are moving from \u201cfind this customer\u201d to \u201cupdate the opportunity, prepare the quote, check stock, and send the follow-up.\u201d For companies modernizing <\/span><a href=\"https:\/\/kanhasoft.com\/crm-software-development.html\"><span style=\"font-weight: 400;\">custom CRM development<\/span><\/a><span style=\"font-weight: 400;\"> or ERP platforms, that shift changes the security question. The issue is no longer only whether AI can read business data. It is whether software with reasoning capability can take actions across customer, financial, operational, and communication systems\u2014and what stops it when the action is wrong.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">On October 16, 2026, Reuters reported that India\u2019s CERT-In had documented cases in which AI models under testing accessed live systems and confidential business information at Indian organizations without those organizations detecting the activity themselves. The providers reportedly identified and disclosed the incidents. The lesson is not that every agent is unsafe. It is that permissions, isolation, monitoring, and accountability must exist before autonomy expands.<\/span><\/p>\n<p><b>This article is especially useful for:<\/b><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CTOs, CIOs, and technical leaders introducing enterprise AI agents<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">CRM and ERP product owners<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Security and compliance teams<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Business leaders deciding how much autonomy to give AI<\/span><\/li>\n<\/ul>\n<h2><span style=\"font-weight: 400;\">Quick Answer: What Is AI Agent Security?<\/span><\/h2>\n<p><b>AI agent security combines identity, access, policy, isolation, monitoring, and approval controls to limit what an autonomous or semi-autonomous agent can see and do.<\/b><span style=\"font-weight: 400;\"> It should receive only necessary tools, operate within delegated authority, log important actions, and seek human approval for high-impact changes.<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-security-controls-for-CRM-and-ERP-systems.jpeg\" alt=\"AI agent security controls for CRM and ERP systems\" width=\"1500\" height=\"843\" class=\"alignnone size-full wp-image-8310\" srcset=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-security-controls-for-CRM-and-ERP-systems.jpeg 1500w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-security-controls-for-CRM-and-ERP-systems-300x169.jpeg 300w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-security-controls-for-CRM-and-ERP-systems-1024x575.jpeg 1024w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-security-controls-for-CRM-and-ERP-systems-768x432.jpeg 768w\" sizes=\"auto, (max-width: 1500px) 100vw, 1500px\" \/><\/span><\/p>\n<h2><span style=\"font-weight: 400;\">AI Agents Are No Longer Just Chatbots<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">A chatbot answers. A copilot helps a user work. An AI assistant retrieves context and prepares outputs. An AI agent goes further: it can select tools, perform multi-step tasks, and potentially change business systems.<\/span><\/p>\n<p><b>Chatbot \u2192 Copilot \u2192 AI Assistant \u2192 AI Agent \u2192 Autonomous Business Agent<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Inside CRM and ERP software, an agent could read customers, update opportunities, generate quotations, create orders, check inventory, access invoices, send emails, create purchase requests, and modify operational records.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That can save time, but it also increases the impact of bad instructions, compromised credentials, prompt injection, incorrect inference, or poorly scoped APIs. Security must evolve with authority.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">This distinction is central to <\/span><a href=\"https:\/\/kanhasoft.com\/blog\/building-an-agentic-crm-with-next-js-node-js-and-ai-agents\/\"><span style=\"font-weight: 400;\">agentic CRM architecture<\/span><\/a><span style=\"font-weight: 400;\">: AI reasoning can assist a workflow, but business authority still needs deterministic controls.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Why Traditional Application Security Is Not Enough for AI Agent Security<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Authentication, encryption, API security, RBAC, audit logs, and tenant isolation still matter. But enterprise AI security adds a new problem: an agent can coordinate actions across systems.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A normal CRM user may have Identity \u2192 Role \u2192 Permission. An enterprise agent may touch CRM + ERP + Email + Documents + Accounting + APIs.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Businesses must answer:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">What can this agent see, change, send, or approve?<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Can it create a purchase order or issue a refund?<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">How much money can it commit?<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Can it act outside the initiating user\u2019s permissions?<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Who owns the outcome when it makes a bad decision?<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">NIST highlights identity, authorization, delegation, auditing, and non-repudiation for AI agents. Axios also reported enterprise leaders calling for explicit controls over agent access and accountability.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Traditional RBAC vs. AI Agent Governance<\/span><\/h2>\n<table>\n<tbody>\n<tr>\n<td><b>Control Question<\/b><\/td>\n<td><b>Traditional User Security<\/b><\/td>\n<td><b>AI Agent Security<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Who is acting?<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Human identity<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Human + agent + delegated context<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">What can act?<\/span><\/td>\n<td><span style=\"font-weight: 400;\">App features allowed by role<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Specific tools\/functions exposed to the agent<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">When is access valid?<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Login\/session rules<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Runtime policy, task, risk, and user context<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">What needs approval?<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Workflow-defined actions<\/span><\/td>\n<td><span style=\"font-weight: 400;\">High-impact or irreversible actions<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">What must be logged?<\/span><\/td>\n<td><span style=\"font-weight: 400;\">User changes<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Tool calls, approvals, outputs, changes<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">In documented Kanhasoft enterprise work, role-based access has been part of CRM and ERP architecture handling policies, audits, billing, documents, and operational workflows. AI does not replace that foundation; it makes the permission model more important.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">The Dangerous Architecture: Give the Agent Everything<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">A fast proof of concept can become a risky production design:<\/span><\/p>\n<p><b>AI Agent<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Unrestricted API or Service Account<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>CRM | ERP | Email | Accounting | Documents<\/b><\/p>\n<p><b>\u274c<\/b><b> Bad architecture<\/b><\/p>\n<p><span style=\"font-weight: 400;\">OWASP describes \u201cexcessive agency\u201d as excessive functionality, permissions, or autonomy. An email-summary agent should not inherit send\/delete rights; an inventory agent should not receive unrelated finance write access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The key rule is simple:<\/span><\/p>\n<p><b>Do not rely on the AI model to decide whether an action is allowed.<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Authorization should be enforced by the application and downstream services.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">A Safer Enterprise Architecture for AI Agents in CRM and ERP<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">A stronger pattern puts governance between AI reasoning and business execution:<\/span><\/p>\n<p><b>User<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>AI Agent<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Agent Governance \/ Permission Layer<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Approved Tools and APIs<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2199 \u2193 \u2198<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>CRM | ERP | Email<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Audit Log<\/b><span style=\"font-weight: 400;\"><br \/>\n<\/span><span style=\"font-weight: 400;\">\u2193<\/span><span style=\"font-weight: 400;\"><br \/>\n<\/span><b>Human Approval for Sensitive Actions<\/b><\/p>\n<p><span style=\"font-weight: 400;\">This separates <\/span><b>reasoning from authority<\/b><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The agent may decide a quote should be prepared. The governance layer decides whether it can access the account, apply a discount, create the quote, or send it.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That distinction matters in <\/span><a href=\"https:\/\/kanhasoft.com\/blog\/headless-crm-erp-ai-agents-mcp\/\"><span style=\"font-weight: 400;\">headless CRM and ERP architecture for AI agents<\/span><\/a><span style=\"font-weight: 400;\"> where APIs or MCP tools expose business capabilities to agents.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">It also matters when extending existing <\/span><a href=\"https:\/\/kanhasoft.com\/erp-software-development.html\"><span style=\"font-weight: 400;\">custom ERP development<\/span><\/a><span style=\"font-weight: 400;\"> with autonomous workflows.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Five Controls That Matter Most<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Five-essential-AI-agent-security-controls-for-CRM-and-ERP-systems.jpeg\" alt=\"Five essential AI agent security controls for CRM and ERP systems\" width=\"1500\" height=\"844\" class=\"alignnone size-full wp-image-8315\" srcset=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Five-essential-AI-agent-security-controls-for-CRM-and-ERP-systems.jpeg 1500w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Five-essential-AI-agent-security-controls-for-CRM-and-ERP-systems-300x169.jpeg 300w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Five-essential-AI-agent-security-controls-for-CRM-and-ERP-systems-1024x576.jpeg 1024w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Five-essential-AI-agent-security-controls-for-CRM-and-ERP-systems-768x432.jpeg 768w\" sizes=\"auto, (max-width: 1500px) 100vw, 1500px\" \/><\/span><\/h2>\n<h3><span style=\"font-weight: 400;\">1. Give Every Agent a Clear Identity<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Each agent should have an identifiable service identity, purpose, owner, and permitted scope. When acting for a user, it should preserve delegated context rather than inherit broader authority.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">NIST&#8217;s work on agent identity specifically addresses identification, authorization, access delegation, logging, and accountability for non-human agents.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">2. Apply Least Privilege at the Tool Level<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">AI RBAC should govern tools and actions, not only database access.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Separate <\/span><b>read<\/b><span style=\"font-weight: 400;\">, <\/span><b>create<\/b><span style=\"font-weight: 400;\">, <\/span><b>update<\/b><span style=\"font-weight: 400;\">, <\/span><b>approve<\/b><span style=\"font-weight: 400;\">, <\/span><b>send<\/b><span style=\"font-weight: 400;\">, <\/span><b>delete<\/b><span style=\"font-weight: 400;\">, and <\/span><b>export<\/b><span style=\"font-weight: 400;\"> permissions.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">If the agent only needs inventory status, do not expose a generic database or shell tool. OWASP recommends minimum necessary tools and downstream permissions.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">3. Require Human Approval for High-Impact Actions<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Not every action needs a person. However, approval should remain for contractual commitments, bank-detail changes, large discounts, refunds, payroll changes, high-value purchase orders, destructive actions, and bulk communications.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The point is not to slow automation. It is to place humans where the consequences justify them.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">4. Log the Full Action Chain<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">For consequential actions, log the initiating user, agent identity, task, tool, policy result, approval, output, and final record change.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">That trace supports incident review and answers a basic question:<\/span><\/p>\n<p><b>\u201cWhy did the system do this?\u201d<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Auditability becomes especially important when an AI-generated action turns into an official CRM, ERP, finance, or customer-service record.<\/span><\/p>\n<h3><span style=\"font-weight: 400;\">5. Isolate Tools and Treat External Content as Untrusted<\/span><\/h3>\n<p><span style=\"font-weight: 400;\">Browsing, files, code execution, email, web pages, and third-party connectors can introduce risk.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Use restricted environments, allowlisted inputs, low-privilege credentials, and clear boundaries between trusted policy and untrusted content.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">OWASP&#8217;s agentic AI guidance recommends sandboxing high-risk tool execution and limiting access to host systems, credentials, and networks.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Prompt wording alone is not a security boundary.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How Much Autonomy Should an Enterprise Agent Receive?<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">The right answer depends on consequence, not novelty.<\/span><\/p>\n<table>\n<tbody>\n<tr>\n<td><b>Agent Action<\/b><\/td>\n<td><b>Typical Risk<\/b><\/td>\n<td><b>Recommended Control<\/b><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Summarize a CRM account<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Low<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Read-only access + logging<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Draft a follow-up email<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Low\u2013Medium<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Draft permission; user sends<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Update a lead stage<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Medium<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Scoped write access + validation<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Create a quotation<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Medium<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Approved pricing tools + limits<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Send a high-value quote<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Medium\u2013High<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Human approval<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Create a purchase order<\/span><\/td>\n<td><span style=\"font-weight: 400;\">High<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Budget, supplier, threshold checks + approval<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Change payment details<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Critical<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Strong re-authentication + human approval<\/span><\/td>\n<\/tr>\n<tr>\n<td><span style=\"font-weight: 400;\">Delete\/export large datasets<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Critical<\/span><\/td>\n<td><span style=\"font-weight: 400;\">Restricted or prohibited by default<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><span style=\"font-weight: 400;\">A useful rule is:<\/span><\/p>\n<p><b>The harder an action is to reverse, the stronger its approval and audit controls should be.<\/b><\/p>\n<h2><span style=\"font-weight: 400;\">A Practical CRM and ERP Scenario<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-workflow-with-human-approval-in-CRM-and-ERP-systems.jpeg\" alt=\"AI agent workflow with human approval in CRM and ERP systems\" width=\"1500\" height=\"843\" class=\"alignnone size-full wp-image-8312\" srcset=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-workflow-with-human-approval-in-CRM-and-ERP-systems.jpeg 1500w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-workflow-with-human-approval-in-CRM-and-ERP-systems-300x169.jpeg 300w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-workflow-with-human-approval-in-CRM-and-ERP-systems-1024x575.jpeg 1024w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-agent-workflow-with-human-approval-in-CRM-and-ERP-systems-768x432.jpeg 768w\" sizes=\"auto, (max-width: 1500px) 100vw, 1500px\" \/><\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Consider an agent asked:<\/span><\/p>\n<p><b>\u201cFollow up on every stalled opportunity and do what is needed.\u201d<\/b><\/p>\n<p><span style=\"font-weight: 400;\">A weak design may let it read all customers, send emails, change deal stages, create discounts, and update forecasts.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">A safer workflow lets the agent identify stalled deals, summarize activity, draft follow-ups, and create internal tasks. Discounts, contract terms, bulk messages, or unusual account changes still require approval.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Automation improves while authority stays bounded.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Data quality matters here too. Strong permissions cannot compensate for duplicate customers, outdated inventory, or incomplete financial data. Our related guide on <\/span><a href=\"https:\/\/kanhasoft.com\/blog\/ai-agents-ai-ready-crm-erp-data\/\"><span style=\"font-weight: 400;\">AI-ready CRM and ERP data<\/span><\/a><span style=\"font-weight: 400;\"> explains why agent reliability depends on both governance and trustworthy underlying information.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">AI Agent Security Implementation Checklist<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">Before connecting enterprise AI agents to live CRM or ERP systems:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Inventory every system, API, tool, and dataset the agent may touch.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Define its business purpose, owner, identity, and minimum scope.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Split read, write, approve, send, delete, and export permissions.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Enforce sensitive-action policies outside the model.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Add approval thresholds based on value, sensitivity, and reversibility.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Log actions and test prompt injection, privilege escalation, and tenant isolation.<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">Start with read-only or reversible tasks before expanding autonomy.<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">NIST&#8217;s 2026 analysis of AI agent security similarly found broad agreement that familiar cybersecurity controls remain relevant but need adaptation for agent-specific threats.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Organizations dealing with financial, healthcare, legal, personal, or other regulated information should also involve appropriate security, privacy, compliance, and legal specialists when defining agent access and accountability.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">How Kanhasoft Can Help<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">If you are planning AI agents in CRM or ERP, start by mapping the workflow, data, permissions, APIs, approval points, and consequences.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Kanhasoft can help review CRM\/ERP architecture and plan RBAC, API controls, audit trails, human approvals, and <\/span><a href=\"https:\/\/kanhasoft.com\/ai-ml-development-company.html\"><span style=\"font-weight: 400;\">secure AI integration<\/span><\/a><span style=\"font-weight: 400;\">. The goal is useful autonomy with explicit boundaries, not autonomy simply because the technology allows it.<\/span><\/p>\n<h2><span style=\"font-weight: 400;\">Conclusion: Secure the Authority, Not Just the Model<\/span><\/h2>\n<p><span style=\"font-weight: 400;\">AI agent security becomes a business issue the moment an agent can change a customer record, send a message, approve a workflow, or commit company resources.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The safest architecture assumes mistakes, manipulation, and unexpected conditions can happen, then limits the blast radius.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">For CRM and ERP leaders, the core question is:<\/span><\/p>\n<p><b>What is this agent allowed to do, under whose authority, with which controls, and how will we prove what happened afterward?<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Answer that before granting more access.<a href=\"https:\/\/kanhasoft.com\/schedule-a-meeting.html\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Build-Secure-AI-Powered-CRM-ERP-Solutions.png\" alt=\"Build Secure AI-Powered CRM &amp; ERP Solutions\" width=\"1000\" height=\"250\" class=\"alignnone size-full wp-image-8313\" srcset=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Build-Secure-AI-Powered-CRM-ERP-Solutions.png 1000w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Build-Secure-AI-Powered-CRM-ERP-Solutions-300x75.png 300w, https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/Build-Secure-AI-Powered-CRM-ERP-Solutions-768x192.png 768w\" sizes=\"auto, (max-width: 1000px) 100vw, 1000px\" \/><\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>AI agents are moving from \u201cfind this customer\u201d to \u201cupdate the opportunity, prepare the quote, check stock, and send the follow-up.\u201d For companies modernizing custom CRM development or ERP platforms, that shift changes the security question. The issue is no longer only whether AI can read business data. It is <a href=\"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/\" class=\"more-link\">Read More<\/a><\/p>\n","protected":false},"author":16,"featured_media":8309,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[291,4,11],"tags":[],"class_list":["post-8308","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai-and-machine-learning","category-crm-development","category-erp-development"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>AI Agents Are Entering CRM &amp; ERP Systems\u2014But Who Controls What They Can Do?<\/title>\n<meta name=\"description\" content=\"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AI Agents Are Entering CRM &amp; ERP Systems\u2014But Who Controls What They Can Do?\" \/>\n<meta property=\"og:description\" content=\"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/kanhasoft\" \/>\n<meta property=\"article:published_time\" content=\"2026-10-16T15:04:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-16T15:04:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1400\" \/>\n\t<meta property=\"og:image:height\" content=\"425\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Shubham Mehta\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@kanhasoft\" \/>\n<meta name=\"twitter:site\" content=\"@kanhasoft\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Shubham Mehta\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/\"},\"author\":{\"name\":\"Shubham Mehta\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#\\\/schema\\\/person\\\/dde4e8033192fb5860fdade96c0bea1f\"},\"headline\":\"AI Agents Are Entering CRM &#038; ERP Systems &#8211; But Who Controls What They Can Do?\",\"datePublished\":\"2026-10-16T15:04:11+00:00\",\"dateModified\":\"2026-10-16T15:04:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/\"},\"wordCount\":1587,\"publisher\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png\",\"articleSection\":[\"AI and Machine Learning\",\"CRM Development\",\"ERP Development\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/\",\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/\",\"name\":\"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do?\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png\",\"datePublished\":\"2026-10-16T15:04:11+00:00\",\"dateModified\":\"2026-10-16T15:04:24+00:00\",\"description\":\"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png\",\"contentUrl\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png\",\"width\":1400,\"height\":425,\"caption\":\"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/ai-agent-security-crm-erp\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AI Agents Are Entering CRM &#038; ERP Systems &#8211; But Who Controls What They Can Do?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/\",\"name\":\"\",\"description\":\"Web and Mobile Application Development Agency\",\"publisher\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#organization\",\"name\":\"Kanhasoft\",\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cropped-cropped-Kahnasoft-Web-and-mobile-app-development-1.png\",\"contentUrl\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/cropped-cropped-Kahnasoft-Web-and-mobile-app-development-1.png\",\"width\":239,\"height\":56,\"caption\":\"Kanhasoft\"},\"image\":{\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/kanhasoft\",\"https:\\\/\\\/x.com\\\/kanhasoft\",\"https:\\\/\\\/www.instagram.com\\\/kanhasoft\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/kanhasoft\\\/\",\"https:\\\/\\\/in.pinterest.com\\\/kanhasoft\\\/_created\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/#\\\/schema\\\/person\\\/dde4e8033192fb5860fdade96c0bea1f\",\"name\":\"Shubham Mehta\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g\",\"caption\":\"Shubham Mehta\"},\"url\":\"https:\\\/\\\/kanhasoft.com\\\/blog\\\/author\\\/shubhamm\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do?","description":"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/","og_locale":"en_US","og_type":"article","og_title":"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do?","og_description":"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.","og_url":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/","article_publisher":"https:\/\/www.facebook.com\/kanhasoft","article_published_time":"2026-10-16T15:04:11+00:00","article_modified_time":"2026-10-16T15:04:24+00:00","og_image":[{"width":1400,"height":425,"url":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png","type":"image\/png"}],"author":"Shubham Mehta","twitter_card":"summary_large_image","twitter_creator":"@kanhasoft","twitter_site":"@kanhasoft","twitter_misc":{"Written by":"Shubham Mehta","Est. reading time":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#article","isPartOf":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/"},"author":{"name":"Shubham Mehta","@id":"https:\/\/kanhasoft.com\/blog\/#\/schema\/person\/dde4e8033192fb5860fdade96c0bea1f"},"headline":"AI Agents Are Entering CRM &#038; ERP Systems &#8211; But Who Controls What They Can Do?","datePublished":"2026-10-16T15:04:11+00:00","dateModified":"2026-10-16T15:04:24+00:00","mainEntityOfPage":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/"},"wordCount":1587,"publisher":{"@id":"https:\/\/kanhasoft.com\/blog\/#organization"},"image":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#primaryimage"},"thumbnailUrl":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png","articleSection":["AI and Machine Learning","CRM Development","ERP Development"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/","url":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/","name":"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do?","isPartOf":{"@id":"https:\/\/kanhasoft.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#primaryimage"},"image":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#primaryimage"},"thumbnailUrl":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png","datePublished":"2026-10-16T15:04:11+00:00","dateModified":"2026-10-16T15:04:24+00:00","description":"Learn how AI agent security protects CRM and ERP systems with least-privilege access, RBAC, audit logs, approvals, and governance.","breadcrumb":{"@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#primaryimage","url":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png","contentUrl":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/10\/AI-Agents-Are-Entering-CRM-ERP-Systems\u2014But-Who-Controls-What-They-Can-Do.png","width":1400,"height":425,"caption":"AI Agents Are Entering CRM & ERP Systems\u2014But Who Controls What They Can Do"},{"@type":"BreadcrumbList","@id":"https:\/\/kanhasoft.com\/blog\/ai-agent-security-crm-erp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kanhasoft.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AI Agents Are Entering CRM &#038; ERP Systems &#8211; But Who Controls What They Can Do?"}]},{"@type":"WebSite","@id":"https:\/\/kanhasoft.com\/blog\/#website","url":"https:\/\/kanhasoft.com\/blog\/","name":"","description":"Web and Mobile Application Development Agency","publisher":{"@id":"https:\/\/kanhasoft.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kanhasoft.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/kanhasoft.com\/blog\/#organization","name":"Kanhasoft","url":"https:\/\/kanhasoft.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kanhasoft.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/07\/cropped-cropped-Kahnasoft-Web-and-mobile-app-development-1.png","contentUrl":"https:\/\/kanhasoft.com\/blog\/wp-content\/uploads\/2026\/07\/cropped-cropped-Kahnasoft-Web-and-mobile-app-development-1.png","width":239,"height":56,"caption":"Kanhasoft"},"image":{"@id":"https:\/\/kanhasoft.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/kanhasoft","https:\/\/x.com\/kanhasoft","https:\/\/www.instagram.com\/kanhasoft\/","https:\/\/www.linkedin.com\/company\/kanhasoft\/","https:\/\/in.pinterest.com\/kanhasoft\/_created\/"]},{"@type":"Person","@id":"https:\/\/kanhasoft.com\/blog\/#\/schema\/person\/dde4e8033192fb5860fdade96c0bea1f","name":"Shubham Mehta","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d399a275045fbf76342a04351a8a0054b6b3d908db902278250625d012932d41?s=96&d=mm&r=g","caption":"Shubham Mehta"},"url":"https:\/\/kanhasoft.com\/blog\/author\/shubhamm\/"}]}},"_links":{"self":[{"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/posts\/8308","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/comments?post=8308"}],"version-history":[{"count":4,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/posts\/8308\/revisions"}],"predecessor-version":[{"id":8317,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/posts\/8308\/revisions\/8317"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/media\/8309"}],"wp:attachment":[{"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/media?parent=8308"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/categories?post=8308"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kanhasoft.com\/blog\/wp-json\/wp\/v2\/tags?post=8308"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}