# AI Coding Tip 036 - Grant AI the Least Privilege Possible

DevFeed: [AI Coding Tip 036 - Grant AI the Least Privilege Possible](<https://devfeed.tech/articles/ai-coding-tip-036-grant-ai-the-least-privilege-possible-18226.md>)

Original publisher: [Read original article](<https://maximilianocontieri.com/ai-coding-tip-036-grant-ai-the-least-privilege-possible>)

Author: Maxi Contieri

Published: 2026-09-12T15:51:59Z

Content type: tutorial

Language: en

Sources: [Maximiliano Contieri - Software Design](<https://devfeed.tech/sources/maximiliano-contieri-software-design.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [AI Agent](<https://devfeed.tech/topics/ai-agent.md>), [Authorization](<https://devfeed.tech/topics/authorization.md>), [API](<https://devfeed.tech/topics/api.md>), [systems](<https://devfeed.tech/topics/systems.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-agent](<https://devfeed.tech/tags/ai-agent.md>), [api](<https://devfeed.tech/tags/api.md>), [authorization](<https://devfeed.tech/tags/authorization.md>), [least-privilege](<https://devfeed.tech/tags/least-privilege.md>), [systems](<https://devfeed.tech/tags/systems.md>)

## AI overview

This developer tip explains why AI agents should receive only the access required for their tasks. It describes how overly broad API permissions, shared credentials, compromised context, and external models connected through MCP can turn routine automation into unauthorized actions.

## Source excerpt

Deny by default, or watch your API become someone else's playground. TL;DR: Give every AI agent only the access its task needs, and watch for the intrusion nobody granted. Common Mistake ❌ You wire