Design least-privilege tool access for an LLM agent that calls internal APIs.

Principle

• One OAuth client per agent capability — read-only ticket lookup vs write-capable PR bot.