every tool the agent can call is part of your attack surface, count them

people audit their api endpoints and then hand an agent ten tools without a second thought. each one is a way for a manipulated agent to do damage. minimize and monitor.