Permission right-sizing
Cutting the permissions an agent is granted down to the ones it uses: comparing what a configuration allows — tools, commands, directories, MCP servers, auto-approval settings — with a record of what was actually called, then removing whatever was never needed or moving it behind a prompt. It is least privilege made measurable, and it has to be repeated, because grants and usage both drift.
How MoorAI handles it: MoorAI's opt-in allow trail sends one content-free record per allowed tool call (the tool name, never its arguments), which is the usage half of the comparison.
See also least privilege for AI agents · excessive agency · the free permission right-sizer
Related terms
-
Least privilege for AI agents
Defence & response
The principle that an agent gets only the tools, files, network destinations and credentials its task needs, for only as long as it needs them.
-
Excessive agency
Attack concepts
The OWASP Top 10 for LLM Applications entry (LLM06:2025) for a system that can be made to take damaging actions in response to unexpected, ambiguous or…
Defence & response
The vocabulary of running controls for agents: knowing what AI is present, cutting what it may do down to what it uses, catching misuse, and reconstructing an incident afterwards. Where MoorAI implements a term, a separate line under the definition says how; the definition itself stays vendor-neutral. To check one agent's configuration against these ideas, use the free permission right-sizer.