Guides · Tag
permissions
31 guides tagged permissions.
Email for Agents · Sep 30, 2026
Does ChatGPT Have an Email Address?
No. ChatGPT has no address of its own, but it can act inside your Gmail or Outlook. What OpenAI documents today, and what owning an inbox takes.
Comparisons · Sep 29, 2026
Gmail MCP Refresh Tokens Expiring Every 7 Days
Why a Gmail MCP refresh token expires every 7 days, what Google requires to stop it, and the other causes that break the same connection on a different clock.
Controls · Sep 27, 2026
Restrict Which Domains Your Agent Can Email
Restrict which domains your agent can email with an allowlist it cannot argue with: the policy call, how recipients match, and what a denied send returns.
Controls · Sep 27, 2026
How to Revoke an Agent's Email Access Instantly
How to revoke an agent's email access: five kill switches ranked by blast radius, the exact calls, and what happens to mail already queued or held.
Controls · Sep 27, 2026
Export an Agent's Email History, Then Deactivate
Export agent email history as NDJSON, verify the checksums, then deactivate the project, knowing the deletion job erases no stored mail.
Integrations · Sep 26, 2026
Email MCP Server Comparison: Who Filters tools/list
An email MCP server comparison on one property: does a narrower credential shrink tools/list? 18 servers audited, 182 registry endpoints probed.
Email for Agents · Sep 26, 2026
An Email Address Is an Agent's First Identity
AI agent identity starts with an email address. What a mailbox proves, what DKIM and DMARC never check, and what A2A, OAuth and AP2 still leave to email.
Email for Agents · Sep 26, 2026
State of Agent Email 2026: Four Architectures
Agent email architecture types, tested against 20 products' own docs: what each is best at, and the failures each will keep no matter who builds it.
Controls · Sep 26, 2026
MCP Tool Filtering Should Be Required
MCP lets a server hide tools a token cannot use but never requires it. The case for mcp tool filtering by scope as a MUST, and the objections.
Controls · Sep 26, 2026
The Agent Email Threat Model
Assets, actors, trust boundaries and eight threats for an agent with an email address, with the layer where each control binds and where ours stops short.
Integrations · Sep 23, 2026
Dify Email Integration: An Inbox per AI Agent
Dify's email plugin sends as one workspace SMTP account. Give each AI agent workflow its own inbox, a scoped key, and sends that survive node retries.
Integrations · Sep 23, 2026
Email MCP in Windsurf, Cline and Zed
One remote URL, three config shapes, no mcp-remote bridge. The current Windsurf, Cline and Zed entries, and four reasons a client cannot connect.
Controls · Sep 23, 2026
Read-Only Email Access for an AI Agent
Read-only email access for an AI agent is five scope strings. The exact list, what the MCP session holds, and three ways the grant quietly leaks.
Integrations · Sep 22, 2026
Give Cursor an Email Inbox Over MCP
Give Cursor an email inbox over MCP: the mcp.json entry, the scope ceiling you set in the client, and the refresh-token replay that revokes the whole grant.
Developers · Sep 22, 2026
Email MCP Server OAuth vs API Key: the 401 Trap
Email MCP server OAuth vs API key: a valid key gets 401 invalid_token at /mcp, not 403, so rotation never helps. What each credential carries.
Integrations · Sep 22, 2026
CrewAI Email Integration: One Inbox, Two Keys
A CrewAI email integration where the inbox is shared and the credential is not: read-only scopes for the researcher, messages:send for one sender agent.
Integrations · Sep 22, 2026
Email Tools for the OpenAI Agents SDK
Wire the OpenAI Agents SDK to an agent-owned inbox: one hosted MCP config or hand-written function tools, a six-tool surface, and a send tool that is absent.
Integrations · Sep 22, 2026
Replit Agents That Own an Email Address
A Replit agent email address for the build loop and a separate live inbox for the deployed app, and why the key prefix keeps them apart.
Integrations · Sep 22, 2026
Give an OpenClaw Agent an Email Inbox
Give an OpenClaw agent an email inbox it can read and draft in, with outbound mail held at a gate the agent itself is not permitted to release.
Controls · Sep 21, 2026
Scoped Credentials for Agent Email: Read, Draft, Send
Give an agent the smallest useful email permission: project and inbox scoping, one-time secrets, draft-only grants, rotation, and revocation you can verify.
Inboxes · Sep 21, 2026
AI Agent Inbox vs Connecting Gmail: How to Choose
Giving an agent its own inbox versus wiring it into an existing Gmail or Microsoft 365 mailbox: identity, blast radius, OAuth scope and revocation.
Email for Agents · Sep 21, 2026
Email for AI Agents: How Agent Inboxes Actually Work
What an email inbox for an AI agent is, how mail arrives and leaves, which permissions matter, and when an agent needs its own address instead of yours.
Integrations · Sep 21, 2026
Give Claude Code Its Own Email Address
Email for Claude Code over remote MCP: one endpoint URL, an OAuth grant instead of an API key, and the exact tool list a read plus draft grant shows.
Inboxes · Sep 21, 2026
Signup and Verification Codes in an Agent's Inbox
Agents that create accounts need a real mailbox for verification email. How to provision one, read the code safely, and where this becomes unacceptable use.
Comparisons · Sep 21, 2026
Evaluate Agent Email Provider Security Without SOC 2
Twelve questions that judge an agent email provider's security from its public API reference in ten minutes, plus the cases where a SOC 2 report still wins.
Integrations · Sep 21, 2026
How to Give an AI Agent Its Own Email Address
Create a dedicated inbox, choose read, draft or send permission, connect over MCP or a scoped key, and prove a real round trip before granting send access.
Controls · Sep 21, 2026
Human Approval Before an AI Agent Sends Email
When to require review, why approval binds to one exact draft version, how recipient rules and daily caps work, and what editing a draft does to its approval.
Integrations · Sep 21, 2026
MCP Email Server: Give Your Agent Client a Real Inbox
How a remote MCP email server works, what the consent screen must show, how to scope a grant to one inbox, and how to verify it before allowing sends.
Controls · Sep 21, 2026
The MCP Tool Surface Is the Permission Boundary
How the MCP tool surface permission boundary is computed per request, what a filtered tools/call returns, and three ways the tool list shrinks under you.
Controls · Sep 21, 2026
Prompt Injection by Email: What Actually Helps
Any stranger can email your agent. What an email-borne injection looks like, why message text must never grant permission, and the controls that limit damage.
Integrations · Sep 20, 2026
MCP or API Key for Agent Email? How to Choose
Remote MCP over OAuth or a project-scoped REST key: what each can and cannot do, who authorises it, how revocation differs, and why teams use both.