---
id: 3825
title: "Otto Support - Excessive Agency and Tool Privileges"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/otto-support-excessive-agency-and-tool-privileges"
published_at: "2026-05-06 00:00"
tags: ["ai-security", "claude-code", "mcp", "ai-agents", "terraform", "mitigations", "excessive-agency"]
phying_url: "https://phying.com/item/3825"
lang: en
---

# Otto Support - Excessive Agency and Tool Privileges

## Summary

Excessive agency in practice: agents with too many tools have wiped production infrastructure, mass-deleted mailboxes, and dropped databases; role-aware tool registration limits the blast radius.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-05-06 00:00
- **Original:** https://bishopfox.com/blog/otto-support-excessive-agency-and-tool-privileges
- **Phying News:** https://phying.com/item/3825