An API key is not accountability
A shared credential can prove that software was allowed through the door. It cannot explain which agent acted, whose authority it used, why the action was permitted, or who owns the result. Production agents need identities that can be traced independently.
Scope should follow the task
An agent qualifying a lead does not need permission to export the customer database. Grant the smallest useful scope, make high impact actions expire or require approval, and separate read access from write access.
Design the evidence with the action
Every consequential step should preserve the initiating user, agent identity, policy decision, tool call, affected data, and outcome. Auditability is much cheaper when it is part of the workflow rather than added after an incident.