Answer
Any external agent still has to go through the same authenticated, permissioned API surface as any other integration — "AI" doesn't bypass discovery, authentication, or access control. See choose an integration approach and authenticate and get access.