Agent Risk Assessment Template
Every new agent gets a risk score before it ships. This template makes the assessment fast and consistent.
The assessment
1. Spend access: can this agent spend? (score 0–5)
2. Tool access: what can it call? (score 0–5)
3. Autonomy: how long unattended? (score 0–5)
4. Blast radius: worst-case cost if ungoverned? (score 0–5)
5. Total: 0–8 low / 9–15 medium / 16–20 high.
6. Required controls by level: low = ceiling; medium = + velocity + allowlist; high = + approvals + kill switch.
FAQ
What's the minimum for any agent?
A ceiling and a velocity limit — even for low risk.
Who reviews high-risk agents?
The budget owner, before deployment.
Related
Stop the next $12,400 night.
One API call (or MCP tool) in front of every agent transaction — APPROVED, BLOCKED, or FLAGGED, deterministic, ~5 ms, fully logged.
See plans — from $99/mo Try a live check