When teams connect an AI agent to their systems, the instinct is to give it everything: read orders, edit orders, issue refunds, send emails, query the database. More tools feel like a more capable agent.
But every tool you add is something the agent can get wrong, or be tricked