Your agents have too much access


You have a coding agent. It needs to call an API, so you generate a static API key, paste it into an .env file, and tell the agent to use that file whenever it needs API access.

Then you ask the agent to GET API data. It performs the read action and detects a data inconsistency, so it decides the next step is to...