Did you knowEvery agent call swaps the user token for a scoped one (RFC 8693) before it reaches a tool.