Learning outcomes
- Explain the operating model behind Tool Authorization.
- Evaluate trade-offs and failure modes for Tool Authorization.
- Apply Tool Authorization to a production decision.
Mental model
The model proposes intent; an independent policy enforcement point authorizes the exact action. Tool availability never implies permission.
Learning outcomes
- Explain the mechanism and ownership boundaries behind Tool Authorization.
- Compare the main design alternatives and their operational trade-offs.
- Diagnose common failures and select evidence for a production decision.
Theory
Authorization should bind the actor, tenant, tool, operation, resource, parameter constraints, purpose, expiry, and approval state. Recheck at execution because credentials and resource state can change after planning.
Trade-offs
Fine-grained authorization limits blast radius but increases policy complexity and denial handling. Broad credentials simplify integration but turn prompt injection into privilege escalation.
Failure modes and misconceptions
Authorizing only at login; passing user tokens into model context; trusting tool names; allowing confused-deputy calls; and failing open when policy services are unavailable.
Decision scenario
A support agent may read any ticket but refund only tickets assigned to the current operator. Design the per-call authorization decision.
Why must tool authorization be evaluated after the model chooses parameters rather than when the conversation begins?
Primary sources
oauth-security-bcpnist-zero-trust
Evidence assessment
Theory and decision mastery
Decision scenario
A production team must adopt Tool Authorization while meeting quality, latency, security, and operating constraints.
Which decision process is most defensible?
Relationships
Tool Authorization builds on Human Approval Boundaries.
Tool Authorization informs governed production decisions and review evidence.
Delegated Credentials for AI Tools builds on tool-authorization.
Tool Authorization informs governed production decisions and review evidence.
Tool Authorization informs governed production decisions and review evidence.
Primary sources
- OAuth 2.0 Security Best Current Practice — IETF, verified 2026-07-21
- Zero Trust Architecture — NIST, verified 2026-07-21