check_excessive_agency
Analyzes agent permissions against task requirements to identify excessive privileges and enforce least access.
Instructions
Assess agent for excessive permissions (least privilege).
Behavior: This tool is read-only and stateless — it produces analysis output without modifying any external systems, databases, or files. Safe to call repeatedly with identical inputs (idempotent). Free tier: 10/day rate limit. Pro tier: unlimited. No authentication required for basic usage.
When to use: Use this tool when you need structured analysis or classification of inputs against established frameworks or standards.
When NOT to use: Not suitable for real-time production decision-making without human review of results.
Args: agent_name (str): The agent name to analyze or process. tools_available (int): The tools available to analyze or process. tools_used_in_task (int): The tools used in task to analyze or process. has_approval_gates (bool): The has approval gates to analyze or process. has_scope_limits (bool): The has scope limits to analyze or process. can_access_filesystem (bool): The can access filesystem to analyze or process. can_access_network (bool): The can access network to analyze or process. can_execute_code (bool): The can execute code to analyze or process. can_modify_data (bool): The can modify data to analyze or process. can_send_communications (bool): The can send communications to analyze or process. api_key (str): The api key to analyze or process.
Behavioral Transparency: - Side Effects: This tool is read-only and produces no side effects. It does not modify any external state, databases, or files. All output is computed in-memory and returned directly to the caller. - Authentication: No authentication required for basic usage. Pro/Enterprise tiers require a valid MEOK API key passed via the MEOK_API_KEY environment variable. - Rate Limits: Free tier: 10 calls/day. Pro tier: unlimited. Rate limit headers are included in responses (X-RateLimit-Remaining, X-RateLimit-Reset). - Error Handling: Returns structured error objects with 'error' key on failure. Never raises unhandled exceptions. Invalid inputs return descriptive validation errors. - Idempotency: Fully idempotent — calling with the same inputs always produces the same output. Safe to retry on timeout or transient failure. - Data Privacy: No input data is stored, logged, or transmitted to external services. All processing happens locally within the MCP server process.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| agent_name | Yes | ||
| tools_available | No | ||
| tools_used_in_task | No | ||
| has_approval_gates | No | ||
| has_scope_limits | No | ||
| can_access_filesystem | No | ||
| can_access_network | No | ||
| can_execute_code | No | ||
| can_modify_data | No | ||
| can_send_communications | No | ||
| caller | No | ||
| api_key | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |