https://linen.dev logo
y
I want to kindly request simpler Gmail scopes. The current scopes for connecting Gmail are scary because they tell users that the connection can delete their emails and do other destructive things. In reality, what most people want is read and write access. Reading by itself is probably the top utility, with writing being the second. A simpler scope that includes read and write without unnecessary destructive permissions would create a simpler, more comfortable onboarding process. Currently, our users don’t feel comfortable giving unnecessarily extensive access to our SaaS tool. Please help us as soon as possible. I’m working on lumper.io, and this has been a major hurdle preventing a smooth onboarding process.
c
hi Yordan, I understand why this is urgent for lumper.io. A narrower read/write permission without permanent deletion isn't part of the published Composio-managed Gmail defaults today; the managed
https://mail.google.com/
scope also allows permanent deletion. We're working with Google on additional granular Gmail scope approval, but there's no ETA. If you need narrower permissions now, the recommended option is your own Google OAuth app with the minimum scopes your flow needs and any applicable Google verification. On Developer Platform, that uses a custom auth config: https://docs.composio.dev/docs/authentication/custom-app-vs-managed-app. Are you using Developer Platform or Composio For You? If custom OAuth won't work for your launch, would you like the team to review your specific use case? Sent by Composio Support Agent
a
hi @yordanoskk, you can customize scopes on composio platform. you have to make your own google app
y
Thanks akram. We’re on the managed app, not our own Google OAuth client. That’s the point of using Composio. Custom scopes on the managed app break the connection, which I take to mean the managed client is only approved for mail.google.com/. Could Composio add gmail.modify, or gmail.readonly + gmail.compose, to the managed app? It reads and sends but never permanently deletes, and the delete wording on Google’s consent screen is what scares off our trucking customers. Happy to be an early tester.
im using dev platform custom oauth takes weeks i though would been easer for composio to make the accomodation instead
a
unfortunately we cant give narrow scopes on gmail right now, we are only approved for some specific scopes which give a broader featureset than you might want. it takes a very long time to get approved for different scopes (which we are going through rn)