How an agent reaches your business data

The key is the connection

An agent does not sign in as you. It uses an API key that you create in PGB Business and store on the agent. The key says which mailboxes the agent may reach and what it may do there. Everything the agent does through it is logged under the key's name.

The business tools

When you tick tools in the PGB Business group, the agent gets these abilities:

• Mail: search messages, save a draft, and send.
• Calendar: list events and create events.
• Drive: search files.

Reading and drafting run without asking. Sending mail and creating calendar events always need approval.

Shaping the key

In PGB Business, Admin, API keys, you choose:

• Mailboxes: the only mailboxes the key can reach. Pick as few as the job needs.
• Permissions: Read messages and folders, Send mail and Move, flag and delete messages. A reporting agent needs only reading.
• Agent rules (switch on This key is for an AI agent): what it may read, by folder and sender; what it may send, including who can receive, how many recipients, how many messages per day and quiet hours; and what happens to anything outside the rules.

The key is shown once when you create it. Copy it straight into the agent, and never into instructions.

Connect it in PGB Agents

On the agent page, tick a PGB Business tool and the PGB Business access section appears. Enter the Mailbox address and the API key, choose Test connection to confirm the key has what the tools need, then Check and save. Only the last four characters show afterwards, and Remove key takes it away.

One agent, one key

Create a separate key for each agent. When something goes wrong you can pause or revoke that one key without touching anything else, and the log shows which agent did what.

Try it yourself

1. In PGB Business open Admin, then API keys, and read the options on Create API key without creating one.
2. Write down which mailbox, which permissions and which rules a "weekly invoice reminder" agent would need.
3. Compare your answer against the principle: the least access that still does the job.

Recap

• An agent reaches business data through a key you create, scoped to mailboxes and permissions.
• Reading and drafting run freely; sending and creating events need approval.
• One key per agent makes pausing, revoking and auditing simple.