Conceptsession-level permission
Session-level Permissions
An authorization model in which an agent is granted tool permissions once at the start of a session, with the decision made before the agent reads its input. When combined with untrusted input, it can readily lead to unintended tool calls and cannot effectively defend against indirect prompt injection attacks.
Timeline (last 90 days)
Oct 15
In an agent scenario with three tools—reading tickets, reading customer records, and sending email—instruction text embedded in the ticket body can cause the agent to call the customer records and email tools without any traditional exploit and without stolen credentials, because permissions are granted per session rather than per call.
Unverified50%