Your agent should not inherit your admin token

Agents need delegated access, not inherited human access. Put policy between the agent and the tool before agents touch real systems.