How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · Component Isolation and Tool Authorization
Tools declare the access they need
Verify that tool manifests declare required privileges, resource limits, and output validation requirements.
OWASP AISVS v1.01, requirement 9.3.3
In plain English
Each tool should come with a manifest saying what access it needs, its resource limits and how its output is validated.
What good looks like
- Every tool has a manifest.
- Manifests list privileges, limits and output checks.
- Manifests are reviewed when tools are added or changed.
How teams usually do it
- A manifest file stored with each tool's code and reviewed in pull requests.
Evidence an auditor would accept
- Manifests for current tools.
Common mistakes
- Manifests that request broad access because nobody pushed back.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.