Applications and scopes

Google Cloud project bubbly-triumph-508920-i8

All Vastream applications are personal, single-user tools. Each one runs locally on the owner’s own server and acts only on that owner’s own Google account. No application is offered to third parties, and no application has any other user.

Vastream Gmail assistant

Lets the owner search their mailbox, read a message or thread, create and edit drafts, reply, and apply or remove labels, from a terminal or an AI assistant.

ScopeWhy the narrower scope is not enough
gmail.modify The tool both reads and changes messages and labels. gmail.readonly would remove the ability to draft, reply and label, which is the point of the tool. gmail.compose alone would allow drafting but not reading, so search and summarising would not work.
gmail.settings.basic Used only to read and change the owner’s own labels. Without it the label operations are unavailable.

Vastream Drive assistant

Lets the owner search Drive, read file contents, list recent files, inspect and manage permissions, create and copy files, and read or edit Google Docs, Sheets, Slides and Calendar events, from the same assistant.

ScopeWhy the narrower scope is not enough
drive.readonly Search and read must cover files the owner did not create with this tool. drive.file alone only sees files the app created or opened, so existing files would be invisible.
drive.file Restricts writes to files the tool created or was explicitly given, so the tool cannot modify unrelated files.
documents, spreadsheets, presentations Google Workspace formats are not readable or writable through Drive scopes alone. These are required to read and edit Docs, Sheets and Slides content.
calendar.events Read and create events on the owner’s own calendars. No other calendar scope is requested.

What these applications do not do