Give an assistant the narrowest key that does the job — a read-only key can only read.
Tools that reach people, spend, publish, erase or decide take confirm. The first call is a preview; the assistant shows it to you and calls again with confirm: true only when you agree. Your client also asks before it runs a tool marked destructive.
Messages and calls an assistant asks for wait in Approvals unless your workspace sends without approval and the key has approvals:decide — and every send check still runs.
Text that arrives from outside — an email, a form, a web page — can try to give the assistant instructions. NorReach labels it as data; the assistant must only follow you.
Revoke the key in Settings › API & webhooks — or disconnect a connected assistant in Settings › API & webhooks › Connected apps (your own in Settings › Security) — and the assistant loses access on its next call.