<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Agent Tools on Stack Research</title><link>https://stackresearch.org/tags/agent-tools/</link><description>Recent content in Agent Tools on Stack Research</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 14 Feb 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://stackresearch.org/tags/agent-tools/index.xml" rel="self" type="application/rss+xml"/><item><title>NHI and Agentic Risk: Least Privilege Meets Least Agency</title><link>https://stackresearch.org/research/nhi-asi-series-02-least-privilege-least-agency/</link><pubDate>Sat, 14 Feb 2026 00:00:00 +0000</pubDate><guid>https://stackresearch.org/research/nhi-asi-series-02-least-privilege-least-agency/</guid><description>&lt;p&gt;A tool can look small from the agent&amp;rsquo;s side and be large from the identity side.&lt;/p&gt;
&lt;p&gt;The interface says &lt;code&gt;lookup_order&lt;/code&gt;. The agent sees a narrow verb: retrieve the order, summarize the status, maybe explain why a shipment is late. Underneath that verb, a service account authenticates to the CRM. It can read orders, update customer records, issue refunds, change shipping addresses, and export account history because those scopes made the first integration easy to ship.&lt;/p&gt;</description></item></channel></rss>