Tool Permission Lab

Scope an agent’s tool permissions, then watch what an attacker can still reach. Least privilege, made visceral.

This is an interactive tool — open it in a browser to use it.