An API key cannot answer that.
Current stateIs this action valid now?A paid invoice may be refundable. A refunded invoice is not.
AuthorityMay this actor do it?Tool access does not say who may act, when the grant expires, or what needs a person.
Total exposureWhat has already been authorized?Individually valid actions can exceed a shared ceiling together.
If a person must exercise judgment, keep the person. If the answer is a rule, why make them check it again and again?