Unverified50% confidenceFactExact time
Read-Only Access means the tool obtains only permission to read data via OAuth or API keys, and cannot modify, delete, or initiate payments, in line with the principle of least privilege.
1
Sources
50%
Confidence
Long-term
Relevance
10/25/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen creating an API key on a broker's platform, grant only read and trade permissions, not withdrawal permissions.78% similarUnverified只读/读写模式切换机制本质上实现了信息安全领域的最小权限原则（Principle of Least Privilege）73% similarUnverifiedThe principle of least privilege recommends creating dedicated service accounts for agents, granting only the necessary read-only permissions in the Graph API (such as Sites.Read.All), with write permissions subject to separate approval and logged.69% similarUnverifiedFor a first release, read-only access is recommended; the control surface of read-only mode is far smaller than allowing the assistant to modify records or trigger actions.68% similarUnverified在Agent代替用户操作敏感账户场景下，仅需读取数据的Agent其令牌Scope应被限定为只读权限68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1096812API
curl https://kongchang.com/api/v1/knowledge/claims/1096812MCP
get_claim(id=1096812)