What a connection can see and do

Every connection is a key. Read, write, and act are not the same key. Approve the smallest useful grant, then watch the first calls.

A model that can search Drive is useful. A model that can share Drive is a different risk. A model that can send mail is a different risk again. Products blur this because one OAuth screen is easier than three. Slow down on that screen.

1. 01

   Classify the tool

   Read (look up), write (create a draft or a file), act (send, pay, delete, invite).

2. 02

   Prefer drafts

   “Create a draft reply” is usually enough. “Send” is a last click you should keep.

3. 03

   Limit the blast radius

   One folder, one repo, one calendar, one label. Whole-account access is rarely the first need.

4. 04

   Log and revoke

   Know where the connector list lives. Review it the way you review logged-in sessions.