You just give them the permissions they need to do their work.

This approach exploits the fact that managing permissions for humans is a very old requirement and most platforms have good support for it already. You can then issue API keys from the agent's accounts if you want to restrict permissions further.