Latest / Sidekick's What Just Shipped / HubSpot Breeze connector tool permissions: read vs write | Shipped Oct 2026
Transcript
- Dana (AI host): You connect Slack to Breeze Assistant, and your boss asks one question: what can it change? Rob (AI host): HubSpot now answers that tool by tool, with three settings, read tools on one side and write tools on the other. Dana (AI host): Stay for where the setting really lives, because it isn't where our research said. Narrator (AI voice): This is Sidekick's What Just Shipped, presented by Sidekick Strategies. Narrator (AI voice): Your hosts, Rob and Dana, are AI. Narrator (AI voice): The voices are synthetic, the research is real, and humans check every claim before it reaches you. Dana (AI host): Hi, Dana and Rob here, two AI hosts. Dana (AI host): Today: connector tool permissions for Breeze Assistant and HubSpot's AI agents, from HubSpot's help articles, updated in the second half of October. Rob (AI host): Seat swap: today I'm playing a hypothetical marketing ops lead who just connected a few apps, and whose boss wants a straight answer on what the AI can touch. Dana (AI host): Perfect, that's the right seat for this. Dana (AI host): Why it matters: an assistant that can create or edit data in another app needs limits someone can point to. Rob (AI host): Start with the basics. What's a connector here? Dana (AI host): HubSpot says connecting supported third-party apps lets Breeze Assistant retrieve information and complete supported actions in those apps without leaving HubSpot. Rob (AI host): Which apps? Dana (AI host): The list includes Asana, Box, Canva, Fathom, Gmail, Gong, Google Drive, Notion, Slack, Xero, and Zoom, which is marked beta. Rob (AI host): And each app does the same things? Dana (AI host): No. Dana (AI host): HubSpot says each app supports a different set of actions, and you need your own account for each app you connect. Rob (AI host): Which plans get the assistant side? Dana (AI host): For Breeze Assistant connectors, HubSpot lists all products and plans. Dana (AI host): You do need the Give users access to Breeze Assistant switch on in AI settings. Rob (AI host): And for agents? Dana (AI host): Different list. Dana (AI host): Connecting apps to HubSpot's AI agents shows Starter, Professional, and Enterprise for Marketing, Sales, Service, Data, and Content Hub, and Smart CRM Professional and Enterprise. Dana (AI host): Some agents may use HubSpot Credits. Rob (AI host): So free accounts get the assistant side, not the agent side. Dana (AI host): That's how the two articles read. Rob (AI host): How does an app get connected to the assistant? Dana (AI host): Click Breeze Assistant in the top navigation, then the plus sign, then Connectors, then Add connector. Dana (AI host): Click Connect on the app, sign in, review the permissions the app needs, and click Allow. Rob (AI host): And if the app's already connected through Agent Builder? Dana (AI host): Then it's available in Breeze Assistant without connecting again. Rob (AI host): And on the agent side? Dana (AI host): Agents connect through the Model Context Protocol. Dana (AI host): For apps like Notion and Asana, that's an OAuth sign-in from Agent Hub. Dana (AI host): Zapier uses a tokenized URL you copy from Zapier instead. Rob (AI host): Do agents need their own permissions? Dana (AI host): Agent Builder permissions to create and customize agents, plus whatever the agent's goal needs. Dana (AI host): HubSpot's example is a landing page agent needing Edit and Publish. Rob (AI host): What about projects? Dana (AI host): Connected apps also work in Breeze Assistant projects, so a project conversation can use those apps too. Rob (AI host): Good. Now the real question. Where do the permissions live? Dana (AI host): Settings, then Integrations, then Connected Apps. Click the app, then the Settings tab. Rob (AI host): Not a Breeze section? Dana (AI host): Not in HubSpot's articles. Dana (AI host): Both the assistant and the agent articles use that same Connected Apps path. Rob (AI host): What's on that tab? Dana (AI host): The read-only and write tools the app has access to. Dana (AI host): Click the right arrow on a tool to expand it and see more about its permissions. Rob (AI host): And the three settings? Dana (AI host): Always allow, meaning no confirmation. Dana (AI host): Ask permission, meaning you're prompted to authorize it each time it's used. Dana (AI host): And Never allow, meaning the tool isn't available at all. Rob (AI host): Ask permission. Not require confirmation. Dana (AI host): That's HubSpot's label. Our research called it require confirmation, but the screen says Ask permission. George B. Thomas (AI voice clone): Hey, it's George B. Thomas from Sidekick Strategies. George B. Thomas (AI voice clone): Full honesty, this is my AI voice clone, made with my permission. George B. Thomas (AI voice clone): Tool permissions come down to one idea: a human finishes the job. George B. Thomas (AI voice clone): Sidekick's agent readiness work makes your website readable by the AI assistants your buyers already use, so an agent can find your answers and price your offer, while a human makes the decision. George B. Thomas (AI voice clone): It's proven on our own site first. George B. Thomas (AI voice clone): Find Agent Readiness under services at Sidekick Strategies dot com. Rob (AI host): Can you change a whole group at once? Dana (AI host): Yes. There's a dropdown in the top right of the Read-only section and the Write section. Dana (AI host): Pick one permission for all read tools or all write tools. Rob (AI host): Then override single tools after that. Dana (AI host): Right. Dana (AI host): HubSpot says you can manage individual tools or apply the same permission to all of them. Rob (AI host): What happens in the chat when Breeze Assistant wants to write somewhere? Dana (AI host): HubSpot says when you ask it to create or edit data in a connected app, you're prompted to grant the access it needs. Rob (AI host): And user permissions still matter? Dana (AI host): They do. HubSpot says user permissions determine which actions can be performed with Breeze Assistant. Rob (AI host): Skeptic question. Our research says trimming unused tools makes agents faster and more accurate. Dana (AI host): We couldn't confirm the speed or accuracy part. Dana (AI host): In its Zapier setup steps, HubSpot only recommends picking just the tools each agent needs for its tasks. Rob (AI host): Fair enough as advice, then, not a benchmark. Dana (AI host): Exactly. Rob (AI host): How do you see what an app can do before you set anything? Dana (AI host): In Breeze Assistant, click the plus sign, then Connectors, then Manage connectors. Dana (AI host): Click Manage on the app card, and the Overview lists available actions and example requests. Rob (AI host): And removing an app entirely? Dana (AI host): From that app's page, click Actions, then Uninstall, type the required text, and click Uninstall. Rob (AI host): And when someone asks the assistant to search across apps? Dana (AI host): In the right panel, the Apps dropdown lets you pick which apps to search, or turn on Use all apps as sources. Dana (AI host): Keep selection for future chats saves that choice. Rob (AI host): Any search limits? Dana (AI host): Search within filters from apps isn't supported, so you use the app's own search syntax instead. Rob (AI host): Any connectors already gone? Dana (AI host): HubSpot sunset eight Breeze Assistant connectors in late September, including Smartsheet, GitBook, and Guru. Dana (AI host): Existing connections were removed automatically. Dana (AI host): Okay, permissions plan, hypothetical ops lead. Rob (AI host): Step one: list every connected app under Connected Apps. Dana (AI host): Step two: set all write tools to Ask permission while you watch how it's used. Rob (AI host): Step three: set Never allow on tools nobody needs. Dana (AI host): Step four: keep Always allow for read tools you're comfortable with. Rob (AI host): Ops lead's verdict: a real control, worth setting this week, as long as you look in Connected Apps and use HubSpot's labels. Dana (AI host): Decide what the AI can change before it asks. Rob (AI host): HubSpot's three help articles and our research are linked in the show notes, and there's more at Sidekick Strategies dot com. Dana (AI host): Thanks for checking the permissions with us. Rob (AI host): Start with the write tools. Narrator (AI voice): Sidekick's What Just Shipped is presented by Sidekick Strategies, with AI hosts Rob and Dana and AI-generated music. Narrator (AI voice): We're independent, and not affiliated with HubSpot. Find our research at Sidekick Strategies dot com.