Hand your assistant the work, not your passwords

Does on its own: read and search your mail, and read your labels and mailbox details.

Asks you first: send, trash or delete a message.

Never sees: your Google password or token.

Does on its own: read your profile, your mail, the user list, your calendar and your OneDrive files.

Asks you first: send mail, delete a message, add a user or create a calendar event.

Never sees: your Microsoft password or token.

Does on its own: read your calendars and events, and check free and busy times.

Asks you first: create, change or cancel an event.

Never sees: your Google password or token.

Does on its own: read meeting spaces, past meetings, who attended, recordings and transcripts.

Asks you first: open an instant meeting or end a running meeting.

Never sees: your Google password or token.

Does on its own: look up charges, customers, invoices, subscriptions and your balance.

Asks you first: refund a charge, take a payment, send a payout or delete a customer.

Never sees: your Stripe key.

Does on its own: nothing.

Asks you first: run any call at all.

Never sees: your Braintree keys.

Does on its own: look up products, prices, customers, subscriptions and transactions.

Asks you first: bill a customer, refund or credit a transaction, or cancel a subscription.

Never sees: your Paddle key.

Does on its own: look up locations, payments, orders, customers and catalog items.

Asks you first: take or refund a payment.

Never sees: your Square password or token.

Does on its own: read invoices, contacts, the chart of accounts, bank transactions and your organization details, and run the profit and loss and balance sheet reports.

Asks you first: create an invoice.

Never sees: your Xero password or token.

Does on its own: read your repos, issues, pull requests and commits, and search repos.

Asks you first: open an issue or a pull request, merge a pull request, or delete a repo.

Never sees: your GitHub password or token.

Does on its own: read your deployments, projects, domains and the names of env vars.

Asks you first: start a deploy, add an env var or delete a project.

Never sees: your Vercel token.

Does on its own: read issues and projects.

Asks you first: create or archive an issue.

Never sees: your Linear password or key.

Does on its own: read your zones, DNS records and account details.

Asks you first: add a DNS record, delete a DNS record or a zone, or purge the cache.

Never sees: your Cloudflare token.

Does on its own: run reports, check which metrics combine, and read property metadata and audience export jobs.

Asks you first: start an audience export or read user-level export rows.

Never sees: your Google password or token.

Does on its own: read events, ticket availability, tickets, locations, bookings, and categories and tags.

Asks you first: add, change or delete an event, a ticket, a location, a category or a tag, take, approve, cancel or delete a booking, or upload an image.

Never sees: your WordPress application password.

Does on its own: read your channels, their history and the member list, and search messages.

Asks you first: post or delete a message, or archive a channel.

Never sees: your Slack password or token.

Does on its own: read your server, channels, the member list and message history.

Asks you first: post or delete a message.

Never sees: your Discord bot token.

Does on its own: read your account, subreddits, user profiles and your inbox, and read and search posts and comments.

Asks you first: post to a subreddit, reply to a post, edit or delete your own posts, or send a private message.

Never sees: your Reddit password or token.

Does on its own: read envelope status, recipients, documents, templates and the audit trail, and download a document.

Asks you first: send an envelope for signature.

Never sees: your Docusign password or token.

Does on its own: browse and search your files, fetch a temporary file link, and read file revisions, existing shared links and account details.

Asks you first: create a folder, move or rename a file, publish a shared link, or delete a file or folder.

Never sees: your Dropbox password or token.

Does on its own: search your files, read file details, download a file and see who a file is shared with.

Asks you first: export a Google Doc, create a folder, or copy, move or delete a file.

Never sees: your Google password or token.

Does on its own: look up contacts, companies and deals.

Asks you first: add a contact, or delete a contact or a deal.

Never sees: your HubSpot password or token.

Does on its own: check the connection, and read audiences, members, campaigns and reports.

Asks you first: add or change a subscriber, or send a campaign.

Never sees: your Mailchimp password or key.

Does on its own: read your ad accounts, campaigns, ad groups and ads, promotable posts, and change history, run performance reports, estimate audience and delivery, and search targeting options.

Asks you first: create, pause or change a campaign, an ad group or an ad, or create a promotable post.

Never sees: your Reddit password or token.

Does on its own: list your models, files and batches.

Asks you first: spend credit on a chat completion, an image or a fine-tune, or delete a file.

Never sees: your OpenAI key.

Does on its own: browse voices, the voice library and models, and read your plan and usage, generation history, and dubbing jobs.

Asks you first: spend credits on speech or delete a history item.

Never sees: your ElevenLabs key.

Does on its own: check a job's status and fetch its result.

Asks you first: spend credit on an image or video job, or cancel a job.

Never sees: your fal key.

Does on its own: check a job's progress, and list generated videos, models and files.

Asks you first: spend credit on a video or delete a file.

Never sees: your Google key.

Does on its own: browse avatars, voices and templates, and read your videos, translation jobs and your credits.

Asks you first: spend credits on an avatar video or speech, or delete a video.

Never sees: your HeyGen key.

Does on its own: check a job's status, estimate a job's cost, browse Soul styles and read a character's status.

Asks you first: spend balance on an image or video, or a trained character, create an upload link, cancel a job, or delete a finished job's files.

Never sees: your Higgsfield key.

Does on its own: browse models and providers, and read what a generation cost, your key's usage and your credits.

Asks you first: spend credit on a chat completion.

Never sees: your OpenRouter key.