How to meet it
OWASP AISVS v1.01
Orchestration & Agentic Security · Agent Authorization, Delegation, and Continuous Enforcement
Fine-grained rules for tool use
Verify that agent actions are authorized against fine-grained policies enforced by the runtime that restrict which tools an agent may invoke, and which parameter values it may supply.
OWASP AISVS v1.01, requirement 9.5.1
In plain English
Decide in policy which tools each agent may call and with which parameter values, and enforce it in the runtime.
What good looks like
- Policies list allowed tools and parameter limits per agent.
- Every call is checked.
- Denied calls are logged.
How teams usually do it
- A policy engine checked by the tool gateway on each call.
Evidence an auditor would accept
- Policies and gateway logs.
Common mistakes
- Allowing a tool but not limiting its parameters, such as allowing email to any address.
Not sure which requirements apply to your system? Take the assessment.
Requirement text from the OWASP AI Security Verification Standard, licensed under CC BY-SA 4.0. This guidance is shared under the same licence.