All API calls go through the okoro proxy, which signs requests, enforces permission scopes, and writes an audit trail for every action your agent takes.

Requirements

VariableDescription
OKORO_SERVICE_TOKENService token from the okoro dashboard (svc_...)

How to get your token →

How it works

Rather than giving your agent raw Gmail credentials, you configure a service token once. When the skill runs, it exchanges that token for a short-lived operation token scoped to exactly the action being performed. The okoro proxy signs the request, forwards it to Gmail, and records the intent in an audit log.

Learn more about how okoro works →

What your agent can do

  • Read messages and threads, including full body content
  • Search using Gmail query syntax (from:, subject:, is:unread, date ranges, etc.)
  • Send emails (plain text or HTML, with attachments)
  • Draft messages and manage drafts
  • Trash and manage message lifecycle
  • Label messages — apply, remove, or create labels
  • Fetch profile — address, total messages, history ID

License

MIT — see LICENSE.