Definition
Granting an AI agent more freedom, permissions, or tool access than the task actually requires. Because a prompt-injected or malicious tool output can steer the agent toward those powerful tools, over-permissioned agents convert a small trick into a serious breach.
Why it matters
Experts consistently rank excessive agency among the top AI risks; the principle of giving agents only the minimum authority needed is the single most effective preventive control.