AgentKey · Access Control
AI agent access control is the enforcement of least-privilege boundaries around an AI agent: limiting which tools it can reach, which actions it can perform, and the parameter ranges it can use.
By AgentKey · Last updated 2026-09-01
Least privilege means giving an agent only the access its task requires and nothing more. For an agent, access is multidimensional: the tool, the action on that tool, and the parameters of the action. A read-only database tool is safer than a general one; a refund under $500 is safer than a refund of any size.
Access control only helps if it is enforced on the real call path. If the agent can bypass the policy, the boundary is decorative. Enforcement must wrap the tools the agent actually calls, so every path goes through the check.
AgentKey's wrap() wraps the agent's real tool list so every call passes through the authorization check. Access control is therefore enforced, not just configured, and the unconfigured default is deny.
Enforcing least-privilege boundaries around an agent: which tools it can reach, which actions it can perform, and the parameter ranges it may use, applied on every real call path.
By limiting the tool, the action, and the parameters. A read-only tool, a capped amount, an allow-listed domain, and an approval threshold are all least-privilege boundaries applied together.