All integrations

Google Contacts

GOOGLE WORKSPACE · PEOPLE

Look up and maintain the contacts in that person’s directory.

Acts as the person, not as itself

Each user connects their own account. Every call carries both identities — the agent and the person it is acting for — so the agent can never reach past what that individual can already do.

Credentials never touch the agent

Tokens live in the vault and attach server-side at call time. The agent holds a session, not a secret, and revoking access does not mean rotating a key.

Every call on the record

Who asked, which agent acted, which action ran, and the verdict that let it through — one audit trail across every integration, not one per vendor.

What an agent can do

Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.

google_contacts_create_contactWRITE

Create a new contact in Google Contacts. Returns the created contact ID.

contacts
google_contacts_create_groupWRITE

Create a new contact group (label). Returns the new group's resource name.

contacts
google_contacts_deleteWRITE

Delete a contact. WARNING: This cannot be undone. IMPORTANT: You must first call google_contacts_list to get the resource_name.

contacts
google_contacts_getREAD

Get details for a specific contact. IMPORTANT: You must first call google_contacts_list to get the resource_name.

contacts.readonly
google_contacts_listREAD

List Google Contacts (People API). Returns contact names, emails, and phone numbers.

contacts.readonly
google_contacts_list_groupsREAD

List all contact groups (labels). Returns group names, IDs, and member counts.

contacts.readonly
google_contacts_list_otherREAD

List 'Other contacts' - contacts automatically saved from interactions (emails, etc.) but not explicitly added.

contacts.other.readonly
google_contacts_updateWRITE

Update an existing contact's information. IMPORTANT: You must first call google_contacts_list to get the resource_name.

contacts

Put Google Contacts behind one governed endpoint.

Same permissions, same audit trail, whatever else you connect next.