Reading your data
These tools are always available to a connected client. They never change anything.
So an assistant can answer questions like “Which companies are tagged enterprise?” or “Show me the contact details for this person” using only read access.
Reading your conversations
A connected client can also read your inbox — the same conversations and messages you see in the app, with your visibility.
This lets an assistant answer questions like “What’s the latest from Acme
Corp?” or “Summarise my unread conversations.”
Conversations you’ve blocked never appear, and an assistant can only open the
threads in your own inbox. When you list a Record’s conversations it may show
ones that belong to a teammate’s inbox so you know they exist, but the
assistant can’t open or read those.
Changing your data
These tools are only available when you grant read-and-write access while connecting.
With write access, an assistant can act on requests like “Add Jane Doe as a new lead” or “Move the Acme deal to the Negotiation stage”.
Every create and update goes through exactly the same rules and validation as
the app — required fields, unique constraints, and your automations all still
apply. Changes an assistant makes appear in a Record’s timeline just like a
change you make by hand.
Drafting and sending messages
Messaging follows a draft-then-send model: an assistant writes a draft, and sending it is always a separate, more carefully guarded step. A draft is never sent on its own — it shows up in your inbox exactly like a draft you started yourself, so you can review (and even add attachments) before anything goes out.
Drafting and editing need read-and-write access. Sending needs a
separate send permission on top of that — so an assistant you’ve allowed to
draft replies still can’t send anything until you’ve explicitly let it.
When an assistant adds a recipient, it shows you whether each address matches
a Record in your CRM, so you can spot a mistaken or made-up address before
sending. Sending only reports a message was accepted for delivery — the
assistant confirms it actually sent by re-reading the conversation.
How much access you grant
Access comes in three levels, each one a deliberate step up:- Read-only — the assistant can look things up and read your conversations, but cannot change or send anything. A good default for an assistant you mainly use to ask questions.
- Read-and-write — the assistant can also create and update Records and compose drafts.
- Send — on top of read-and-write, the assistant can send drafts as messages.
What an assistant can never do
- Delete Records without write access. Deleting is part of read-and-write access; a read-only assistant can never delete a Record. (When you do grant write access, deletion is permanent — review the Changing your data section above.)
- Send without permission. Sending is a separate trust level, and even then only ever sends a draft you can review first.
- Forward a thread or attach files when sending. An assistant can’t forward an existing conversation to a new address, and attachment content is never sent over an AI connection.
- Reach another Workspace. A connection is locked to the single Workspace you selected.
- See more than you can. The assistant acts as you, with your visibility — nothing more.
Manage your connections
Review which assistants are connected and revoke access at any time.