The product seems to use the same 'scoping' mechanism that humans would use, so you can give agents access to whatever 'channels' you want.

The issue seems to be that they 'invented' an auth and permission protocol instead of delegating to something existing, it would be as if they thought their idea of permissions were novel.