Excessive Agency

Excessive agency expands the blast radius of erroneous or manipulated agent actions. It arises from overly broad tools, elevated permissions, missing approvals, or insufficiently bounded tasks.

Use this profile to understand the building block briefly, place it in the model, and switch to the 360° assessment when needed.

Content type

Concept

Theoretical construct: explains a term, principle, or mental model.

Classification level

Element

Concrete cog in the system that works inside larger relationships.

Available perspectives

Open this building block directly in an already curated view.

360°

In brief

Excessive agency in brief

Excessive agency is a system executing more actions or holding more permissions than its task requires and authorizes.

Where does it come from?

The term was adopted in the security context for agentic systems from the principle of least privilege. OWASP lists excessive agency among the Top 10 risks for large-language-model applications when functions, permissions, or trust assumptions are unnecessarily broad.

The mental model

Each action needs a bounded capability, controlled scope, and verifiable result. Tools, identities, and approvals together determine an agent’s actual reach.

Key building blocks

Core idea

Excessive agency is a system executing more actions or holding more permissions than its task requires and authorizes. Conceptual starting point.

Mechanism

Each action needs a bounded capability, controlled scope, and verifiable result. Tools, identities, and approvals together determine an agent’s actual reach. Practical guiding question.

Practice context

Limiting reach reduces misuse and blast radius. Allowlists, least privilege, confirmations for sensitive steps, and logging keep actions controllable.

When is it useful?

Limiting reach reduces misuse and blast radius. Allowlists, least privilege, confirmations for sensitive steps, and logging keep actions controllable.

OWASP – LLM06:2025 Excessive Agency NIST SP 800-53 – Least Privilege (AC-6)