When you invite an external agent to Fabric, control what it can do in every connected app. Gmail, Google Drive, Slack, and more. Per-action permissions, time-limited passes, instant revocation, and full audit logging. The firewall between external agents and your world of data.

Control what external agents do in your apps.

Per-app permissions.
Each connected app has its own set of permissions you can grant to external agents. An agent with Gmail access might be allowed to read emails and create drafts but not send or delete. You define the boundaries for each app individually.

Per-action granularity.
Permissions are not all-or-nothing. You control at the action level. An external agent connected to Google Drive can be allowed to read files but not modify them. An agent with Slack access can post in specific channels but not read DMs. Each action is a separate permission you grant or withhold.

Separate from your own access and Fabric's agents.
Your personal connections to apps remain yours. Fabric's own native background agents have their own permission model. Agent Passes creates a distinct, controlled layer of access specifically for external agents you have invited into your workspace through Agent Vault. Connecting Gmail to Fabric for your own use does not give any external agent the ability to read your email. External agent access is always explicit.

Approve, limit, revoke.

Approve on request.
When an external agent needs to use a connected app it does not have permission for, it sends a request through Fabric. You see what app, what action, and why. Approve for one time, for a limited period, or indefinitely. Or deny.

Time-limited passes.
Grant an external agent access to an app for a specific task or time period. When the pass expires, the agent loses that capability automatically. No need to remember to clean up permissions after a project ends.

Revoke instantly.
Change your mind at any time. Revoke any pass and the external agent immediately loses that capability. Every active pass is visible in one place so you always know exactly what each agent can do across all your connected apps.

The agent adoption problem.

The biggest barrier to using external AI agents is not capability. It is trust. People look at the list of apps an agent could access and hesitate. "If I give Claude access to my email, can it send messages as me?" "If I connect Muse to our Google Drive, can it delete files?" "If an agent has access to Slack, can it read everything?" The answer with most agent platforms is either "yes, it can do everything the connection allows" or "we do not support that integration." Neither answer builds confidence.

The result is that many teams who would benefit enormously from external AI agents never connect them to the tools where those agents would be most useful. The agent runs in isolation with limited data, or the team does not adopt agents at all. The potential value goes unrealised because there is no way to say "you can do this but not that" at the granular level people need to feel comfortable.

Fabric as the firewall.

Agent Passes sits between external agents and your connected apps like a firewall. When you invite an external agent to your workspace through Agent Vault, the agent does not get direct access to your connected services. Instead, every interaction between the agent and an external app passes through Fabric's permission layer. You see what the agent is trying to do. You decide whether to allow it. You control how long the permission lasts. If you change your mind, you revoke the pass and the access disappears immediately.

This means you can start using external agents with your connected apps gradually. Invite Claude and give it read-only access to Gmail to start. See how it uses that access. If you are comfortable, add the ability to create drafts. Then perhaps sending, but only to internal addresses. Each step is a separate, revocable decision. You never have to make a single all-or-nothing choice about what an external agent can do with an app that contains years of your data.

Clear logging and anomaly detection.

Every action an external agent takes through a connected app is logged. What app, what action, what data was accessed or modified, and when. The log is available for review at any time. You can verify that a research agent searched Google Drive for specific documents but did not modify any files. You can confirm that a writing agent created a draft in Gmail but did not send it.

For teams, the logging extends across the entire workspace. Administrators can see what every external agent across the organisation is doing in connected apps and configure notifications for unusual patterns. An agent that suddenly starts accessing far more email than usual, or that attempts an action it has never tried before, triggers an alert. This gives organisations the confidence to invite external agents and grant them access to Gmail, Google Drive, Dropbox, Notion, Slack, and other services without losing visibility or control.

Team-wide governance for external agents.

For startups, agencies, and larger organisations, Agent Passes provides the governance layer that makes company-wide external agent deployment practical. Workspace administrators set policies about which apps external agents can access and what actions are allowed. Individual team members invite and use external agents within those policies. The external agents that team members bring in, whether Claude for research, Instinct for analysis, or Muse for creative work, all operate within defined boundaries that the organisation controls.

This is what separates practical external agent adoption from the theoretical promise of AI agents. Most teams are not asking "can these agents do useful work?" They are asking "can I let these agents into our systems without worrying about what else they might do?" Agent Passes answers that question with clear boundaries, visible permissions, complete audit trails, and instant revocability.

Use cases

Email research with guardrails
Invite an external agent and grant it read-only access to Gmail. The agent can search and read emails to gather context for reports or research, but cannot send, delete, or modify anything in your inbox.

Document research across cloud storage
An external agent that searches across Google Drive and Dropbox for relevant files. It can read and reference documents but cannot modify, move, or delete anything in your cloud storage. Your files stay exactly where they are.

Multi-app workflows with clear boundaries
An external agent that reads from Slack, searches Google Drive, and writes to your Fabric workspace. Each app has its own pass with its own permissions. The agent can read from external sources but can only write to Fabric, where you review the output.

Controlled CRM access
An external agent that reads deal information from a connected CRM to produce intelligence for your sales knowledge base. It has read access to CRM data but cannot modify records. Sales intelligence flows into your workspace without any risk to your CRM data.

Perfect for

Teams adopting external agents
Give your team the confidence to invite and use external AI agents with connected apps. Administrators set policies, individuals work within those boundaries, and everyone has visibility into what external agents are doing. Learn more about Fabric for teams.

Startups
Use the best external agents available without worrying about uncontrolled access to your connected tools. Start with read-only passes and expand as you build confidence in each agent. Learn more about Fabric for startups.

Agencies and consultancies
Client data flows through email, cloud storage, and messaging tools. Agent Passes ensures that external agents working across these apps operate within strict boundaries that protect client confidentiality. Learn more about Fabric for agencies.

Regulated industries
Organisations with compliance requirements for data handling get granular per-app, per-action controls with complete audit logging for every external agent interaction. Demonstrate that third-party AI access to company systems is governed, logged, and revocable.

Works seamlessly with other features.

Agent Vault
Agent Vault controls what external agents can access within your Fabric workspace. Agent Passes controls what those same external agents can do in your connected external apps. Together, they provide complete governance over external agent behavior across your entire ecosystem.

Background agents
Fabric's own native background agents are distinct from external agents. They run within Fabric with their own permission model. Agent Passes applies specifically to external agents you have invited into your workspace.

Connections
Agent Passes works with every connected app in your Fabric workspace. Gmail, Google Drive, Dropbox, Notion, Zapier, and all other integrations are controllable through passes.

Private and secure
Agent Passes extends Fabric's privacy and security model to external agent interactions with your connected services. The same principles of controlled access, auditability, and revocability apply.

FAQ

What is an "external agent"?
Any AI agent that is not Fabric's own native background agent. This includes agents like Claude, Instinct, Muse, and any other third-party AI tool that you invite to your Fabric workspace through Agent Vault.

How does this relate to Agent Vault?
Agent Vault controls what external agents can access within your Fabric workspace: which folders, spaces, and files they can read and write. Agent Passes controls what those same external agents can do in your connected external apps: which actions they can perform in Gmail, Google Drive, Slack, and other services. Both use the same approval, time-limiting, and audit mechanisms. Together they provide complete control.

What level of control do I have over each app?
Per-action granularity. For email, you can separately control reading, drafting, sending, and deleting. For cloud storage, you can separately control reading, creating, modifying, and deleting. Each action is an individual permission. The specific actions available depend on the connected app.

Is external agent access separate from my own access?
Yes. Your personal connections to apps remain yours. Inviting an external agent to your workspace and connecting Gmail for your own use are completely separate. External agent access is always an explicit, separate grant through Agent Passes.

How is this different from Fabric's own background agents?
Fabric's native background agents are built into Fabric and have their own permission controls. Agent Passes is specifically about controlling what external third-party agents can do in your connected apps when you invite them into your workspace through Agent Vault.

Can I grant temporary access?
Yes. Every pass can be time-limited. Grant access for a single task, an hour, a day, a week, or indefinitely. Time-limited passes expire automatically. You can also revoke any pass instantly at any time.

Can I see what external agents have done in my connected apps?
Yes. Every action an external agent takes through a connected app is logged. The audit log shows what app, what action, what data was involved, and when. You can review, filter, and export the log at any time.

Can team administrators set policies for all external agents?
Yes. On Team plans, administrators set organisation-wide policies about which apps external agents can access and what actions are allowed. Individual team members invite and use external agents within those policies.

Can I get alerts about unusual external agent behavior?
Yes. Configure notifications for anomalous patterns, such as an agent accessing significantly more data than usual or attempting actions it has not used before. Alerts surface potential issues before they become problems.

What if I want to stop using an external agent entirely?
Revoke all its passes and remove it from your workspace through Agent Vault. All access ceases immediately. The audit log of its past activity remains available for review.

Is Agent Passes available on all plans?
Agent Passes is available on Pro and Team plans. Advanced team governance features are available on Team plans. See individual pricing or team pricing for details.