MT.1117: Published AI agents should not be dormant.
| ID | MT.1117 |
| Severity | Low |
| Suite | Mito |
| Product | Copilot Studio |
| Feature | Agents |
| Security area | AI and agents |
| Resource type | Agent |
| User impact of fixing | Low |
| Effort to fix | Medium |
| Reads from | Microsoft Graph |
What this checks and how to fix it
Section titled “What this checks and how to fix it”AI agents should not remain dormant for extended periods.
Published agents that have not been modified in over 180 days may have outdated configurations, stale permissions, or unpatched security settings. These agents continue to be accessible to users but may no longer reflect current organizational policies.
How to fix
Section titled “How to fix”Review dormant agents and either update their configuration to align with current policies, or unpublish/delete agents that are no longer needed.
Learn more: Delete agents programmatically and delete an agent in Copilot Studio
Mito check. Author: lnfernux. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.