Introducing TOLAP: object-level access control for AI agent tools

Picture this: an AI agent is answering a question about a patient population.

To do it, the agent calls a tool, and the tool queries a clinical database. IAM has already given the green light — the agent can invoke this tool.

OAuth scopes checked out. The gateway logged the call. But nobody in that [...]