Business

Agent tool permissions and scopes

• A Permission Diff for Tool Schemas: Claim vs. Behaviour
• Agent Tool Permissions: A Scope Matrix Your Team Can Enforce
• How to Scope an Agent's Data Access to a Policy Tier
• Testing a Scope Matrix with Deliberate Overreach Probes
• When Two Agents Share a Tool: Scoping Permissions by Caller
• Assigning an Owner and Review Date to Every Scope Matrix Row
• Booking Agent Write Permissions: Scopes, Limits and Approvals
• Coverage Gap Check for Scope Probes: What Synthetic Callers Miss
• Giving Every Scope Matrix Cell an Owner and a Review Date
• How to Scope an Agent's Access to One System at a Time
• How to Test an Agent's Data Access with Synthetic Traces
• Mapping Each Agent Role to Its Own API Key
• Reading a Failed Scope Probe: Prompt, Schema or Owner
• Revoking an Agent's Access While Its Retries Are In Flight
• Rewriting a Vendor's Permission Answers as a Diffable File
• Rotating a Shared Tool's Caller Tokens Without Downtime
• Scheduling Agent Permissions That Prevent Overwrites
• Synthetic Callers for Scope Probes, One Fixture per Role
• Testing a Tool's Caller Scope with Synthetic Caller Identities
• Tool Permissions for Agents: Least Privilege in Practice
• When a Probe Passes but the Agent Still Overreaches