AI Agent Least-Privilege Auditor

Audits an AI agent's tool grants, MCP server connections, OAuth scopes, file-system reach, and network egress for least-privilege violations — produces a prioritized scope-reduction plan, identity model, kill-switch path, and continuous-monitoring runbook so production agents stop being treated as high-trust insiders by default