Hi HN! We built nonce, an open-source tool that sits between personal AI agents (Muse, Grok, ChatGPT, Claude) and your personal data in Gmail, Calendar, Drive and more.
Today, if you connect Gmail to an AI agent like Muse, it can read your entire inbox. Whether on purpose or not, they can read far more emails than needed. This poses a huge data-privilege risk, in which personal data is accessed without limits.
With nonce, the AI will no longer hold your Google or Slack tokens. To read anything, it has to show its intent first:
User's question: When does my flight to Tokyo leave? Agent's justification: Need the airline confirmation email Agent's search query: from:united.com Tokyo Access needed: 10 minutes
If the justification and search query are reasonable, nonce issues a scoped token to the AI Agent. AI Agent can only query data using a token.
If something looks fishy, i.e the AI is acting on its own, wants too much, or wants sensitive emails like bank statements, medical results, or password resets. nonce sends you a notification to approve or deny.
By default, nonce denies massive crawling behaviors
How it works 1. nonce scores each search against your original question before running it, to ensure its relevance. 2. Every search is combined with the token's search. If the AI searches "bank statement", nonce runs (from:united.com Tokyo) AND (bank statement). It can narrow its access, but not widen it. 3. The token is scoped to that agent only, with a TTL for X minutes.
Limitations: nonce can't see your chat with the AI, so it can't prove you asked, which leaves a risk that the AI Agent can fake the intent. However, users can audit past accesses in nonce portal and identify these bypasses.
Give it a shot at [https://github.com/roe-ai/nonce](https://github.com/roe-ai/nonce) We'd love to hear what you think.
Website: [https://anonce.io](https://anonce.io)
Comments URL: [https://news.ycombinator.com/item?id=50330213](https://news.ycombinator.com/item?id=50330213)
Points: 1