Unverified50% confidenceSolutionExact time
Each tool should run under a per-user credential so that the agent can only operate on data the user already has permission to access.
1
Sources
50%
Confidence
Long-term
Relevance
10/7/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe identity layer ensures that every call made by every Agent has a verifiable identity attribution, which is a prerequisite for enforcing access control policies.74% similarUnverifiedIn multi-agent architectures, messages sent from one agent to another should be protected in the same way as user input, and each agent should only possess the permissions necessary to run its tools.73% similarUnverifiedIn Agent systems, permissions should be independently verified for each tool call rather than relying on session-level authorization, combined with the principle of least privilege to revoke permissions immediately after an operation is complete.72% similarUnverified面向客户的Agent只能依赖模型自主触发（model-invoked）的Skills，而无法依赖用户主动调用68% similarUnverified在持有真实登录态的场景下，Agent操作等同于以用户身份在网站上行动，携带的认证凭据与用户本人完全相同67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/983760API
curl https://kongchang.com/api/v1/knowledge/claims/983760MCP
get_claim(id=983760)