Least-privilege roles, SSL, and secrets managers are required. Once the agent can connect with write grants, every tool call shares that power until something else intervenes.
Change control for humans is tickets and reviews. Change control for agents needs a machine-checkable receipt on the statement path.
We do not ask you to replace your connection model. We ask you to authorize the mutate.