This is a free browser tool on circuits.fit.
List each agent, the identity it uses, and what it can change. Flags stale reviews and shared logins.
An AI agent is software that can take actions, not only answer questions. It might reply to a ticket, update a record, send an email, or start a payment. Each of those actions runs under some identity, and that identity decides what the agent can touch. This page is a simple register: one row per agent, the account it uses, what it can read and change, whether it can spend money or send external messages, and when its access was last reviewed.
Gartner’s September 30, 2026 note on CISO priorities reported that 54% of organizations in a second-quarter survey of 297 security leaders had no defined approach to limiting agent access, or relied on access defined for a person. The first step out of that position is a list. You cannot limit what you have not written down.
Not legal, tax, insurance, or procurement advice. Inputs stay in your browser. Nothing is uploaded.
Top comments (0)