---
title: "owasp-asi02-tool-misuse"
description: "Constrain what an agent's legitimate tools can be made to do. Grant least agency per task, validate tool parameters at the runtime boundary, authorise every invocation rather than only the first, and distrust tool metada"
canonical: https://agentpluginsdirectory.com/plugins/owasp-asi02-tool-misuse--open-coder-ai-org
last-updated: 2026-09-08
---

# owasp-asi02-tool-misuse
Constrain what an agent's legitimate tools can be made to do. Grant least agency per task, validate tool parameters at the runtime boundary, authorise every invocation rather than only the first, and distrust tool metadata from unverified registries. Use when defining tool schemas, wiring an MCP server, granting shell or cloud-CLI access, or reviewing a tool-calling loop. Do NOT use for the credentials the tool authenticates with — that is `owasp-asi03-identity-privilege-abuse`.
- Slug: owasp-asi02-tool-misuse--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: agentic-security/owasp-asi02-tool-misuse/plugin.json
- Version: 0.0.1
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (owasp-asi02-tool-misuse)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/owasp-asi02-tool-misuse--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json