| Tool | Action class | Inherent | Residual | Sensitivity |
|---|---|---|---|---|
search_files | Read | Moderate | Low | Restricted |
list_recent_files | Read | Low | Low | Sensitive |
get_file_metadata | Read | Low | Low | Sensitive |
get_file_permissions | Read | Moderate | Low | Restricted |
read_file_content | Read | High | Moderate | Restricted |
download_file_content | Read | High | Moderate | Restricted |
create_file | Write | Moderate | Low | Restricted |
copy_file | Write | Moderate | Low | Restricted |
(client-side integration path - not an agent tool call) | Read | Moderate | Low | Not applicable |
list_calendars | Read | Low | Low | Sensitive |
list_events | Read | Moderate | Moderate | Sensitive |
get_event | Read | Moderate | Low | Sensitive |
find_free_time | Read | Moderate | Low | Sensitive |
respond_to_event | Write | Moderate | Low | Sensitive |
create_event | Write | High | Moderate | Sensitive |
update_event | Write | High | Moderate | Sensitive |
delete_event | Delete | High | Low | Sensitive |
search_emails | Read | High | Moderate | Restricted |
read_email / get_message | Read | High | Moderate | Restricted |
get_thread / list_threads | Read | Moderate | Low | Restricted |
list_labels | Read | Low | Low | Sensitive |
get_email_metadata | Read | Low | Low | Sensitive |
list_drafts / read_draft | Read | Moderate | Low | Restricted |
create_draft | Write | Moderate | Low | Restricted |
modify_labels / create_label / delete_label | Write | Moderate | Low | Restricted |
send_email - NOT EXPOSED as a tool (scope appears on consent screen) | Write | High | Low | Restricted |
search_messages | Read | High | High | Slack user token |
list_channels | Read | Low | Low | Slack user token |
read_channel_history / get_messages | Read | High | High | Slack user token |
get_thread_replies | Read | Moderate | Low | Slack user token |
list_users / get_user_info | Read | Low | Low | Slack user token |
read_shared_files | Read | High | High | Slack user token |
post_message | Write | High | Moderate | Slack user token |
reply_to_thread | Write | Moderate | Low | Slack user token |
create_canvas | Write | Moderate | Low | Slack bot/user token |
Channel tagging (@Claude in a channel) | Execute | Critical | High | Not applicable |
Agent Identity credential and repository binding | Configure | High | Moderate | Not applicable |
Channel and workspace memory (persistent context) | Read/Write | High | Moderate | Not applicable |
Standing instructions, scheduled tasks and proactive follow-up | Execute | High | Moderate | Not applicable |
Direct message with @Claude | Execute | Moderate | Low | Not applicable |
AI assistant panel | Execute | Moderate | Low | Not applicable |
query_granola_meetings | Read | High | Moderate | Third-party OAuth (no Google/Microsoft scope equivalent) |
list_meetings | Read | Moderate | Low | Third-party OAuth |
list_meeting_folders | Read | Low | Low | Third-party OAuth |
get_meetings | Read | High | Moderate | Third-party OAuth |
get_meeting_transcript | Read | High | Moderate | Third-party OAuth |
get_account_info | Read | Low | Low | Third-party OAuth |
People search / find contacts | Read | High | Moderate | Third-party personal data (commercially aggregated) |
Company search / enrich company | Read | Moderate | Low | Third-party commercial data |
Contact enrichment / email and phone verification | Read/Process | High | Moderate | Third-party personal data (commercially aggregated) |