The risk of stale credentials and excessive permissions for AI agents

TechstrongTV says AI agent credentials can remain active long after the decisions that created them, and an agent can end up with more access than the person it serves. It recommends checking authorization when an agent uses a token rather than relying on the decision made when the token was created.