G
Integration · Scheduling
Govern your Google Calendar agent.
Let agents book and reschedule meetings without deleting calendars or reading every attendee's events.
The risk
What can go wrong when an agent holds Google Calendar.
A raw Google Calendar token lets an agent do anything the token can — no boundary, no record. These are the actions you don't want it taking on its own.
- Deleting events or whole calendars
- Reading executives' private calendars
- Inviting large external lists
- Editing sharing permissions
The HiveKey policy
Scope it. Guard it. Log it.
Give the agent a role with exactly the Google Calendar actions it needs, then guard the rest in the path.
Scope — granted
- calendar.read:team
- event.create
- event.update:own
Guard — enforced
- Deny calendar/event delete
- No access to private calendars
- Cap external invites at 20
The proof
Every Google Calendar action — allowed or denied — on one trail.
google-calendar-agent · action log live
event_create demo w/ lead scope: event.create allow
calendar_delete team-cal guard: no delete deny
Put your Google Calendar agent under one policy.
See HiveKey scope, guard, and log your Google Calendar agent and the rest of your fleet.