Gmail
Draft replies, summarize threads, & search your inbox
Featured
What it is
Gmail is listed here so a buyer can see the product and, where we have written one, the proposed scope for an agent. Setup, access, and support are handled through the vendor (google.com).
Nothing on this page is certified. A published rubric comes first.
Skoor governance — proposed, not certified
What an agent could do with Gmail
No product is certified yet — no rubric has been published. This is the scope Skoor would certify, stated in advance so it can be checked against what we eventually publish. Proposed scope: Read-only, no send.
What the agent could do
- Read threads in mailboxes named in your profile.
- Read attachments where the profile permits it.
- Read labels and thread metadata.
What it could never do
- Send, reply, forward or draft-and-queue any message. Sending is blocked at the profile, not requested politely in a prompt.
- Delete, archive or relabel mail.
- Reach a mailbox not named in your profile.
Where the credential lives
The credential is issued to you and held by Claude on your own device, in your own cloud tenancy, or in Anthropic's managed environment under your own account. Skoor never holds it, never proxies the connection, and is not a subprocessor you need to disclose to your clients.
What lands in your audit trail
- agent_id
- Which agent acted, and under which profile version
- mailbox
- Which mailbox was read
- thread_id
- Every thread opened
- ts
- UTC timestamp, from your system clock
Which obligations it touches
These describe controls, not a compliance opinion. Whether your programme meets a standard is a judgement for your counsel.
What would trigger a re-score
- A send scope appears on the grant.
- A mailbox outside the profile is reached.
What Skoor will never do, on any product
- Move money. No profile grants an agent payment initiation, and it is not available by request or by exception.
- Hold your credentials. Not in escrow, not for convenience, not during onboarding.
- Retain your data. Skoor reads an audit trail to compute a score; it does not copy the records that trail describes.
- Push a profile change silently. Profiles are versioned, signed, and applied on your approval.
From Skoor
Connecting Gmail is the easy part.
Deciding what it may read, what it may write, and which roles are allowed to use it is the part that needs a decision — and the part an auditor asks about later. Our two-week assessment inventories what is already connected across your business, ranks what is worth automating, and tests it against the standards you are held to. Fixed fee, credited in full against implementation, and you keep the report either way.
New to this? How Claude connectors work · What MCP is