A marketing-analytics agent is connected to a vendor's MCP server that exposes 30 tools, including campaign reporting, budget reallocation, audience export and account-user management. The agent's only job is producing weekly performance summaries. A security review flags the configuration. What is the most appropriate change?

Answer: B — Expose only the reporting tools the summary workflow uses, and back them with a read-only vendor credential

Least privilege removes what the role doesn't need: expose only the reporting tools and scope the credential behind them to read-only, so neither the tool list nor the credential allows writes. (a) is prompt-only enforcement that injection or error can bypass. (c) gates capabilities the role never uses, adding approval fatigue instead of removing the surface. (d) is detective: it reports misuse after the budget is moved or the audience exported.