also scoped permissions
Giving each user, service and agent only the permissions it needs for its job, and nothing more.
You have done this if
You gave the agent a read-only token for the CRM instead of the admin key the prototype used.
Say it in a review
Each tool gets a scoped credential; the agent can read tickets but only a human can close them.
On the AI Application map Tools, Identity
Read Your tool registry is an access control list wearing a different name · Your agent should not be a superuser