A Reddit thread on connecting Claude Code to a Yahoo Mail account turned into a solid field guide for scoping down what an AI agent is allowed to touch. Here's the distilled version.
Don't give Claude Code your Yahoo password or unrestricted mailbox access. The risk isn't only the password leaking, it's that an agent with full access can read private messages, attachments, recovery details, and information about other people, all in the course of doing something mundane.
Why "just connect it" is the wrong instinct
The thread's most-quoted line frames the problem well: people are casually handing agents the keys to everything at once.
People are talking about just giving ai agents access to their entire devices LOL. Emails, passwords, bank accounts like what.
