Thanks for commenting :) The whole point is tighter scopes. You control what parameters the agent is allowed to pass when calling endpoints. This allows things like revealing only a few folders in your repo to your agent