Agent Data Least-Privilege Gateway

Let AI agents read only the emails they actually need

Problem

Personal AI agents connected to Gmail can read the entire inbox, far beyond what's needed—a big privacy risk. Someone on HN built Nonce to address this, but least-privilege data access for personal AI agents is still early.

Solution

A local or hosted gateway: when an agent requests data, return only necessary fields per policy, with scoped access to Gmail/Calendar/Drive, redaction, and audit logs.

Users

Heavy personal-AI-agent users, privacy-conscious developers, small teams

MVP

Google OAuth for Gmail/Calendar; return minimal data per query scope; policy config (read-only, field allowlist, time window); local audit log; one-click revoke agent access

Revenue

Free personal tier + paid advanced policies; per-seat team tier; open-source core with paid hosting and audit retention

Why now

Personal AI agents are exploding but permission models are crude, and users are starting to worry about inbox overreach; indie developers can build trust with open source and local-first