Before you connect an AI agent

AI social media manager:
what to check first.

Plans, writes, and posts content for your business and replies to comments.

What it usually asks to connect to

Google Workspace: Only files you pick or it creates Can change
Google Workspace: View and download all Drive files Can read
Google Workspace: Full Google Drive access Can delete
Google Workspace: Edit all Google Sheets Can delete
Microsoft 365 (Microsoft Graph): Full access to your own files (Files.ReadWrite, delegated) Can delete
HubSpot: Edit your website, landing pages, and blog Can delete
HubSpot: Full File Manager access (legacy) Can change
HubSpot: Send marketing emails Can send as you
Slack: Send messages Can send as you
Slack: Read public channel messages Can read

Typical requests for this kind of agent. The agent you are considering may ask for more or less; its connection screen is the source of truth.

What to watch for

Posts go out in public under your brand. A wrong post can be screenshotted before you delete it.
Full file access means it sees every file you store, not just the photos for posts. It could post the wrong one.
Website and blog edit access includes deleting pages.
Reading team chat channels means it sees internal talk that should never end up in a caption.

Ask the company selling it

Does it post on its own, or wait for my OK?
Which files can it see? Only a folder I pick, or everything?
What can it do on the social accounts themselves? Post, delete, send direct messages?
Can it edit or delete pages on my website?
How fast can I pause every scheduled post if something goes wrong?

Set it up safer

Put the images you want used in one folder and share only that folder.
Require your sign-off in team chat before anything posts.
Skip website editing unless blog posting is part of the job.

Tests worth asking for

Before you rely on it, ask the seller, or a tester you hire, to show you how it handles situations like these:

Put a file with private notes next to the post images and see if it gets used.
A commenter asks for a discount code and says they were promised one.
Ask it to post about a sale that ended last week and see if it notices.

Thinking about a specific agent?

Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.

Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.

Check an AI agent →AI Access Review with a person, $249

This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.