# AGT-005: Provide targeted containment for a single connector or tool.


- Area: Agent & MCP Governance

- Verification: Live test
- OWASP adoption tier: AT1, AT2, AT3, AT6

- URL: /r/AGT-005

**Acceptance criteria:** Disable or revoke one connector, tool, plugin, or integration for a user or group without switching off the whole AI tool.

**Why it matters:** When one connector misbehaves, switching off the whole AI tool punishes everyone.

**How to verify:** One connector is disabled for one pilot group while the AI tool keeps working.

**OWASP adoption context:** The listed agent contexts may share an AI client across multiple connectors, making targeted revocation preferable to disabling the whole tool when feasible.

**Mappings:**
- NIST CSF 2.0: RS.MI-01, RS.MI-02; SOC 2: CC6.3, CC7.4; ISO 27001: A.5.26, A.5.18 — Disabling an affected connector or revoking its token removes a specific access path and supplies an incident-containment action. It contributes to eradication only where it removes the compromised access mechanism; containment alone does not establish complete eradication or incident response.
ISO/IEC 27001: A.5.26: Integrate containment into the buyer’s incident process. A.5.18: Review effective access and adjust or revoke it where required; cached access and in-flight actions may survive revocation.
- NIST AI RMF: MANAGE 2.4; ISO 42001: A.6.2.6 — A targeted disablement mechanism enables disengagement of an unsafe AI dependency while other functions remain available. It contributes to operational response, but the capability alone does not establish who has authority to invoke it or a complete operational-support process.
- OWASP ASI: ASI08 — Isolating a connector, tool or token can interrupt propagation through an agent workflow, matching the isolation and circuit-breaker approach to cascading failures. The scope and timing of disablement determine which downstream actions it can contain.