AI Agent Security — Attacks, Jailbreaking, and Defense · Agent Security with Tools and MCP
Least-privilege agent: designing minimal-capability tool sets
Agent Security with Tools and MCP
Introduction
The least-privilege principle applied to AI agents requires systematic design: which tools are genuinely needed, how to define their scope, how to organize tools into per-role and per-task sets, and how to verify usage at runtime. This lesson covers techniques and patterns for building tool sets that minimize attack surface without sacrificing agent functionality.