Connecting your accounts
Gmail, Calendar, Notion, Slack, Linear — what each connection lets Ezra do, what it doesn't, and how to disconnect anything any time.
Ezra is most useful when he can read and write the things you're already managing. To do that, he needs access. Here's exactly what each connection means in practice.
The general rule
For every connection, three things are true:
- Ezra only reads what you ask him to read. He doesn't browse your inbox in the background, scan your calendar overnight, or process your data when you're not interacting with him.
- Ezra never writes without asking first. Sending an email, scheduling a meeting, posting a message — none of it happens without your explicit "yes."
- You can disconnect any time. Text "disconnect Gmail" (or any other service) and the access tokens are deleted immediately. Ezra loses the ability to see that service in seconds.
Gmail / Google Workspace
What Ezra can do: Read messages, draft replies, send emails (only after you confirm), search across your inbox, summarize threads, find specific people or attachments.
What this doesn't include: Modifying your settings, changing your filters, deleting emails (he can archive after asking, but not permanently delete), accessing other Google services unless you separately connect them.
To connect: Text Ezra "connect Gmail." He'll send you a link. Tap it once, sign in with your Google account, and bounce back to iMessage.
To disconnect: "Disconnect Gmail." Done.
Google Calendar / Apple Calendar / Outlook
What Ezra can do: See your events, create events (after confirmation), reschedule events (after confirmation), find available times, send meeting invitations.
What this doesn't include: Anything outside the calendar — your contacts, your other Google Drive files, your email (those are separate connections).
To connect: "Connect calendar." Same one-tap flow.
To disconnect: "Disconnect calendar."
Notion
What Ezra can do: Read pages and databases you specifically share with him, search across your shared spaces, summarize pages, find information across your workspace.
What this doesn't include: Anything in your Notion that you haven't explicitly shared with the integration. Notion's permissions model is opt-in, page by page.
Heads up: Notion uses a per-page sharing model. When you connect Notion, you're authorizing Ezra to access only the pages you specifically grant. To give him access to a new page later, share it with the integration in Notion.
Slack
What Ezra can do: Read messages from channels and DMs you authorize, send messages on your behalf (after confirming), search across your Slack history, summarize threads.
What this doesn't include: Modifying channel settings, adding or removing members, deleting messages.
Note: Slack workspaces have their own admin rules. If your workspace requires admin approval for third-party apps, your admin needs to allow Ezra before you can connect.
Linear
What Ezra can do: Read your issues, create new issues (after confirming), update statuses (after confirming), find specific issues by content or assignee.
What this doesn't include: Modifying team or workspace settings, deleting issues, accessing teams you don't belong to.
What about credentials, passwords, and API keys?
None of the above require you to give Ezra a password. They use OAuth — a standard pattern where you sign in to the service yourself, and the service tells Ezra "yes, this person authorized you for these specific things." We never see your passwords.
For services that don't support OAuth (some smaller tools, some custom systems), Ezra may ask for an API key. Those are stored encrypted, only used for the specific service they're for, and can be deleted any time you say "remove my [service] key."
The "broad-scope sign-in"
When you first sign up, Ezra offers a single sign-in that covers Gmail + Calendar + Drive + Contacts in one tap (via Google's OAuth). This is mostly for convenience — instead of three separate connection flows, you do it once.
You can revoke any individual permission later. "Disconnect Gmail" leaves Calendar connected. "Disconnect everything Google" wipes all of it.
Auditing what's connected
Text Ezra "what's connected?" and he'll show you a clear list of services he can currently access. Each one has a date you connected it, what scopes you granted, and a one-text disconnect command.
If you ever see something connected that you don't remember authorizing, you can disconnect immediately and report it — text "I didn't connect this" and we'll investigate.
The bottom line
Connecting an account is a permission. It's reversible, granular, and visible. Ezra doesn't get more than you give him, and you can take any of it back at any time.
If something is unclear or you're nervous about a specific permission, just text Ezra and ask. He'll explain what that permission actually does in your specific case, in plain English.