Connections and permissions
Every connection Sydbar can have, what each lets it do, where it's kept and how to remove it.
Connections live in Settings → Connections. Each one belongs to one business; Sydbar never reads or sends across businesses.
Every connection
| Connection | Belongs to | Sydbar can | Remove it |
|---|---|---|---|
| Google (Gmail, Calendar, Meet) | One business | Read the mail that matters, send replies you approve, archive and Trash, Gmail labels, see and add calendar events, read Meet transcripts | Settings → Connections → Google → Disconnect (Google revokes Sydbar's access), or your Google account's permissions |
| App password mailbox | One business | Read the inbox and send replies you approve (IMAP and SMTP) | Settings → Connections → App password → Disconnect |
| GitHub | One business | Read repos you link; write the scope file and milestones when you ask | Settings → Connections → Disconnect |
| Linear | One business | Read projects you link; add the scope document and milestones when you ask | Settings → Connections → Disconnect |
| Notion | One business | Read pages you import as context | Settings → Connections → Disconnect |
| AI key | You | Run Sydbar's AI for the businesses you created, billed by your provider | Settings → AI → Remove |
| Agent keys | You | What the agent tools allow, in your businesses | Settings → Agents → Revoke |
Google or app password?
| Connect Gmail (Google) | App password | |
|---|---|---|
| Read and send mail | Yes | Yes |
| Works with | Gmail, Google Workspace | Gmail, Google Workspace, iCloud, Yahoo and most IMAP mail (not Microsoft yet) |
| Archive and Trash in Gmail | Yes | Sydbar only |
| Tags as Gmail labels | Yes | No |
| Calendar, booking pages, Meet transcripts | Yes | No |
| Import signature from Gmail | Yes | No |
A route counts as connected only after a provider check passes. Until then the business can't send replies.
Signing in is separate
Your Sydbar sign-in (email and password) has nothing to do with these connections. You don't need a Google account to use Sydbar, and you can connect a Gmail account with a different address from the one you sign in with.
How secrets are kept
Tokens, app passwords and AI keys stay on the server and are never shown in the app again after you connect. Agent keys are stored as a one-way hash. Disconnecting deletes what was stored; your conversations stay.