All integrations

Google Classroom

GOOGLE WORKSPACE · TASKS

Courses, rosters, and coursework, scoped to the acting user.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

google_classroom_create_courseWRITE

Create a new Google Classroom course.

classroom.courses
google_classroom_delete_courseWRITE

Delete a already archived course.

classroom.courses
google_classroom_get_courseREAD

Get details about a specific course.

classroom.courses.readonly
google_classroom_list_coursesREAD

List Google Classroom courses.

classroom.courses.readonly
google_classroom_list_studentsREAD

List all students enrolled in a course (only if user is teacher, otherwise students listed as classmates).

classroom.rosters.readonly
google_classroom_list_teachersREAD

List all teachers of a course.

classroom.rosters.readonly
google_classroom_update_courseWRITE

Update a course's details.

classroom.courses

Put Google Classroom behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.