Account scoping
Restricting which advertising accounts a server may reach, enforced on the server rather than left to the model to respect.
In detail.
A platform token usually sees every account the person can see, which for an agency is every client. Scoping narrows that to an explicit list, checked on every call, so an account that was not ticked is refused even when the model asks for it by identifier.
The distinction that matters is where the check runs. A scope described in a tool description is a request. A scope enforced server side is a boundary.
Through an agent.
What changes when a model asks instead of a person.
Models sometimes guess identifiers, especially when a conversation has mentioned several accounts. Server-side scoping turns a guess into a refusal instead of a cross-client data leak.