All integrations

Gmail

GOOGLE WORKSPACE · EMAIL

Read, search, draft, and send mail as the person the agent acts for.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

gmail_replyWRITE

Reply to an existing Gmail message. Maintains threading. Requires gmail.send scope.

gmail.send
gmail_sendWRITE

Send an email via Gmail. Requires gmail.send scope.

gmail.send
google_gmail_add_labelWRITE

Add labels to a Gmail message. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_archive_messageWRITE

Archive a Gmail message by removing the INBOX label. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_create_draftWRITE

Create a new Gmail draft. The draft can be edited or sent later.

gmail.compose
google_gmail_delete_draftWRITE

Delete a Gmail draft. IMPORTANT: You must first call google_gmail_list_drafts to get the actual draft_id. Do NOT use placeholder values.

gmail.compose
google_gmail_get_threadREAD

Get a complete Gmail thread with all messages. Returns the full conversation including all replies. IMPORTANT: You must first call google_gmail_list_threads to get the thread_id.

gmail.readonly
google_gmail_list_draftsREAD

List Gmail drafts. Returns draft IDs, subjects, and recipients.

gmail.compose
google_gmail_list_messagesREAD

List Gmail messages with full content. Returns message IDs, subject, from, to, date, snippet, body_text, and body_html for each message.

gmail.readonly
google_gmail_list_threadsREAD

List Gmail threads (conversations). Returns thread IDs and snippets. A thread groups related messages together.

gmail.readonly
google_gmail_mark_readWRITE

Mark a Gmail message as read. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_mark_unreadWRITE

Mark a Gmail message as unread. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_read_messageREAD

Read a specific Gmail message by ID. Returns full message content including subject, from, to, and body. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.readonly
google_gmail_remove_labelWRITE

Remove labels from a Gmail message. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_send_draftWRITE

Send an existing Gmail draft. IMPORTANT: You must first call google_gmail_list_drafts to get the actual draft_id. Do NOT use placeholder values.

gmail.compose
google_gmail_trash_messageWRITE

Move a Gmail message to trash. IMPORTANT: You must first call google_gmail_list_messages to get the actual message_id. Do NOT use placeholder values.

gmail.modify
google_gmail_update_draftWRITE

Update an existing Gmail draft. IMPORTANT: You must first call google_gmail_list_drafts to get the actual draft_id (a long alphanumeric string like 'r3948572938475293847'). Do NOT use placeholder values.

gmail.compose

Put Gmail behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.