Not every agent API is public.
A plugin can ask AI to dig up a private endpoint and hit it with your token. Goal met. Risk: the vendor bans the account for unauthorized use.
If you build tools that sit on other people's agents, protect their accounts. Stick to documented APIs.