What can an AI agent do with
Full Google Calendar access?
The agent can see, change, share and permanently delete every calendar you can access, and all the events on them.
How to spot it
On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/calendar.
With it, an agent can
- Read all your calendars and events
- Create, change and delete events
- Send invites, updates and cancellations to guests
- Change who your calendars are shared with
- Delete extra calendars or wipe every event from your main calendar
It cannot, on its own
- Read your Gmail or Drive. Those need separate permissions.
What a bad day looks like
A tricked agent could share your calendar with an outsider, exposing client names and meeting details, or wipe your schedule.
Set it up safer
- If it only books and updates appointments, ask for https://www.googleapis.com/auth/calendar.events.
- If it only checks when you are free, ask for https://www.googleapis.com/auth/calendar.freebusy.
- Ask whether it can keep its bookings in its own calendar using https://www.googleapis.com/auth/calendar.app.created.
Narrower permissions on Google Workspace:
- View and edit calendar events
https://www.googleapis.com/auth/calendar.events - View calendars
https://www.googleapis.com/auth/calendar.readonly
Ask the company selling the agent
- Why does it need to change calendar sharing?
- Will it ever delete events or whole calendars?
- Does it email my guests when it changes an event?
Source
Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.