Prevent excess access with least-privilege roles, context-aware policy gates, and scoped just-in-time tokens rather than standing credentials. Give each agent its own identity and a narrow role, add ABAC attributes and policy so context decides each action, and mint short-lived tokens per action so the access an agent can exercise at any moment is smaller than the role it holds. NIST SP 800-207 frames this as minimizing standing access and enforcing least privilege dynamically, which for a non-human identity that acts autonomously is the difference between a bounded agent and an over-privileged one.