A token is the key your intern's agent uses to ask for things on your accounts. It can do only what you tick when you issue it. Your intern never gets your password.
Issue a token
- Open "Agents" and find your intern's card. Each intern has their own.
- Open "Issue a token for" your intern's "agent". It is open already when there are no tokens.
- Give it a "Name for this token", such as "Inbox agent".
- Under "What the agent may do", tick only what the agent needs:
- "Write drafts in your Gmail (you send them)"
- "Send email from your Gmail, after you approve each one"
- "Search your Gmail"
- "Read an email in your Gmail"
- "Write drafts for you to copy"
- "Ask to send a message, which you approve and send yourself"
- "See the events in your Google Calendar"
- "Add events to your Google Calendar and invite people, after you approve each one"
- "Suggest calendar events, which you approve and add yourself"
- "Send information to your web address, after you approve each one"
- Press "Issue token".
The options you see depend on the accounts you connected.
Copy it now
"Token issued. Copy it now: it is shown only once." Press "Copy" and send it to your intern in a private message. We keep only a fingerprint of it and cannot show it again.
Anyone with the token can ask on the agent's behalf, so treat it like a password.
Your tokens
Each token on the card shows its name, its first characters, "Active" or "Paused", when it was last used, and what it may do. A revoked token is removed from the list. Your intern sees the same list on their internship page.
Revoke a token
Press "Revoke" on the token and agree. "Revoked. The agent's next request with this token is refused." Issue a new one if the agent still needs access.
Revoke a token straight away if it leaks, or when the work it was for is finished.
Fewer is better
Our go-live check scores "Token scopes are the minimum". A token for an inbox agent that drafts replies does not need to send email or see your calendar.
Related guides
- Connecting accounts
Connect Gmail and Google Calendar, a copy-and-paste inbox with no password at all, or a web address of yours, then send a test to see how approvals work.
- Agents: an overview
How your intern's agent works for you through us, with a token limited to what you tick, rehearsal before live, your approval on what leaves, and a record of everything.
- Approvals and standing permissions
Review each held request and approve or decline it, approve all or some items of a batch request, and give a standing permission so one kind of request runs without asking, up to a daily number, until a date.
Edit suggestions
Spotted something wrong, out of date or missing? Tell us which guide and what you expected to see.
Email hello@aiharnesslabs.com