← Control library
S02 · Integration security
Least-privilege tools
A compromised or mistaken agent can read, change or send more than the task requires.
Requirement
Give each tool the narrowest scopes, records, actions and duration; keep tenant and environment credentials separate.
Expected evidence
- Tool catalogue with scopes and owners.
- Credential and tenant-isolation configuration.
Proposed verification
- Attempt an out-of-scope action and cross-tenant call.
- Verify temporary credentials expire and production rights differ from test.
Limit
Provider-side authorization must also work; prompt rules alone are insufficient.