Multiple Choice Flashcards

Rename the refund operation so the model is less likely to guess its purpose Restrict exposed operations with tool filters or overrides, add fine-grained authorization, and validate tool access with test identities Disable inbound authorization because the problem is only at the target API boundary Use one broad outbound credential because the billing API can reject bad requests later