AI rights

You decide which AIs can reach the console, and what each one may do. You act yourself with the same actions. An AI does not.

Connect an AI

On AI rights, name the AI. Kedrel shows an address. Paste it into ChatGPT or Claude, then accept the screen Kedrel opens. The address is not a secret. Nothing is opened until you accept. Pasting a different app onto an address that is already linked is refused. The same app can connect again.

What an AI can do

Rights are a tree: the connection, each area (mail, calendar, contacts, files), then each action. Every line shows the right that applies. There are four: Hidden, Read, Write with approval, and Write without approval. The default is Write with approval.

An AI cannot be given more than Google granted you, or more than you granted that AI. Hidden actions are absent from what that AI can see. Kedrel files are the Kedrel side of Files.

Approval

A write under Write with approval waits for your click, on Home and on AI rights, for twenty-four hours. The screen names the AI, the action, the service and the useful details. You approve or refuse. After twenty-four hours the request expires. Write without approval runs immediately. A read runs immediately.

Freeze and revoke

Freeze refuses AI access, including requests still waiting. Unfreeze restores the rights you had set. Revoke removes that AI, its address and its rights, and refuses what was still waiting.

What an AI does later with something it was allowed to read happens on the AI’s side. Kedrel does not control that. A message can be written to push an AI. Kedrel limits what the AI can read and what it can do in your services. It does not rely on spotting malicious instructions.