Gmail setup

Live OAuth foundation with scope selection, shared persistence, and interim credential export for ReefMail or future Gmail MCP flows.

Back to landing View connector definition

What happens next

Use this page only for provider authorization and setup choices. Ongoing management starts after the result is saved into a workspace.

Authorize access

Choose the connector access level and complete the provider OAuth step.

Save to workspace

Persist the installation in Reef Connect, then manage rollout from Installed and Runtime.

After authorization

Before save

Reef Connect keeps the provider result only long enough to finish the setup steps on this public page.

After save

Save into a workspace when this connector should be managed later from Installed and Runtime.

Gmail will support inbox-aware agents that summarize threads, draft replies, and send controlled outbound communication on behalf of a workspace.

Step 1 · Choose connector access

Start by selecting the permission level you want to grant this connector. The managed Reef Connect path stays available after authorization.

Permission posture

Start with the narrowest access level that still supports the workflow you want. You can reconnect later if the connector needs broader permissions.

Choose access level

Read-only inbox access

Your agent can read and summarize messages but cannot send or modify them.https://www.googleapis.com/auth/gmail.readonly

Read and modify inbox state

Your agent can read mail, apply labels, archive threads, and manage mailbox state.https://www.googleapis.com/auth/gmail.modify

Send mail onlySelected

Your agent can send outbound messages without inbox read access.https://www.googleapis.com/auth/gmail.send

Selected access

Current permission profile is ready for Google authorization.

Google will ask the operator to authorize the selected permission set for Gmail. After OAuth, Reef Connect will continue into the connector-specific setup step.

Connect Gmail