Gmail

Restrict how your agents can use Gmail.

Require agents to confirm every email they send, or set up custom rules for automation.

GmailInbox agent · Dana's Gmailkc_…m41l
PermissionAccessOnly when
Messages · Send
messages.send
Allowed
Every recipient is one of alice@hollis-cpa.com, ben@hollis-cpa.com
Messages · Send
messages.send
Ask meWaits up to 24 hoursAny request
Drafts · Create
drafts.create
AllowedAny request
Messages · Read
messages.read
Allowed
Everyone is one of *@acme.dev, *@hollis-cpa.com
Allowed goes straight throughAsk me waits for your confirmation
What you can control

Permissions

Each row of a key's Gmail access is one of these, set to Allowed or Ask me.

PermissionName in the API
Messages · Readmessages.read
Messages · Sendmessages.send
Messages · Labelmessages.modify
Messages · Trashmessages.trash
Threads · Readthreads.read
Threads · Labelthreads.modify
Threads · Trashthreads.trash
Drafts · Readdrafts.read
Drafts · Createdrafts.create
Drafts · Updatedrafts.update
Drafts · Deletedrafts.delete
Drafts · Senddrafts.send
Profile · Readprofile.read
Messages · Listmessages.list
Threads · Listthreads.list
Drafts · Listdrafts.list
History · Readhistory.read
Labels · Readlabels.read
Labels · Createlabels.create
Labels · Updatelabels.update
Labels · Deletelabels.delete
Custom rule: a method and a path that you choose.

Give your agents Gmail keys that fit.