What can an AI agent do with
Send email as you?
The agent can send email from your Gmail address to anyone. It cannot read your inbox.
How to spot it
On a Google Workspace connection or settings screen, this is https://www.googleapis.com/auth/gmail.send.
With it, an agent can
- Send email from your Gmail address
- Send to any recipients, including Cc and Bcc
It cannot, on its own
- Read the email in your inbox
- Save drafts
- Trash or delete email
What a bad day looks like
A tricked agent could send convincing email from your real address to customers or suppliers, for example with fake payment details.
Set it up safer
- Turn on an approval step so you see each email before it goes out.
- Send from a separate address, like a shared support mailbox, instead of your own.
Ask the company selling the agent
- Who decides the recipients, me or the agent?
- Can I review and approve each email before it sends?
- Is there a daily limit on how many emails it sends?
Source
Checked against Google Workspace documentation on 2026-09-28. All Google Workspace permissions →
Thinking about a specific agent?
Tell us what it connects to, what it is allowed to do and who approves its work. You get a plain-language label of what it can touch and what to ask the seller. It takes a couple of minutes, and your answers stay in your browser unless you choose to post a test job.
Or have a person go through the AI apps on up to 3 of your business services with you and get a written report, for $249.
This page explains what a permission allows. It does not describe, test or rate any product. Permission details are summarized in our own words from the provider's documentation, linked on the page; providers change their documentation, so check the source before you rely on a detail.