How to Revoke AI Agent Access to Gmail, Google Drive and Other Apps (2026)

Want to stop an AI agent from reading your Gmail, searching Google Drive, or using a connected app? You generally need to remove its authorization from the account that granted access. Simply closing the chatbot, signing out, or uninstalling its browser extension might not revoke the underlying account permission.

This guide explains how to revoke AI agent access to Gmail, Google Drive, ChatGPT connections, and other services in 2026. It also covers an important limitation: removing future access does not necessarily delete information the service already received.

Illustration note: The featured image is a conceptual example of connected-app permission controls, not a screenshot of Google or ChatGPT settings. Use the official links below to reach the actual controls.

First, identify which type of AI access you want to remove

Not every “connected app” is the same. Google distinguishes access to account data, Sign in with Google, linked-app access by Gemini or Google agents, and Drive-specific app integrations. Removing one type of link may not remove the others. Use the right controls:

The interface and available options can vary by product, account, and administrator settings. Google’s linked apps instructions explain the separate authorization types.

Quick answer: How to revoke AI agent access

1. Open your Google Account’s third-party connections page and sign in to the correct account.
2. Find the app with access to Gmail, Google Drive, Calendar, or another Google service.
3. Open its details, review the permissions, then choose Remove access and confirm.
4. If you also connected the service inside an AI product, disconnect that account there as well.
5. Check whether the AI service retained copies, summaries, downloaded files, chats, or scheduled tasks.

Important: Menu labels may vary slightly by device and account. For Google Workspace accounts, an administrator may control some connections and permissions.

1. Check which AI apps have access to your Google Account

Before removing anything, identify the actual connection. A browser-based AI assistant might appear under its company name rather than the tool’s marketing name. The Google permissions page can also show non-AI productivity apps you previously authorized.

1. Visit myaccount.google.com/connections.
2. Choose the Google Account you used to connect the AI service. Repeat the check for another account if you use separate personal and work accounts.
3. Review the available connection types. Google distinguishes Sign in with Google from apps that have some access to your Google Account data.
4. Open an unfamiliar or unused connection and examine its details before removing it.

Look for permission descriptions involving reading email, accessing Drive files, editing documents, sending messages, modifying calendar events, or accessing contacts. These scopes matter more than whether an app calls itself an ‘AI agent.’

According to Google’s guidance on data access, linked apps can receive different levels of permission, from basic profile details to viewing, copying, creating, editing, or deleting data. Signing in with Google alone does not automatically mean the app can read your Gmail.

Extra check: Stop Gemini or a Google agent from using a linked app

Google documents a separate Agent access permission. This applies when you allowed Gemini or a Google agent to interact with an app linked to your Google Account. It is not the same as revoking a third-party tool’s direct Gmail or Drive data access.

1. Open Google Account linked apps while signed into the correct Google Account.
2. Choose the Agent access filter, or search for the linked app.
3. Select the app and find the section labelled Agents that interact with [app name].
4. Choose Stop using [app name] for the relevant agent, then confirm Stop using.
5. Review other connection types separately if you also want to remove Sign in with Google or third-party data permissions.

Important: Google states that removing an agent’s permission does not delete or disconnect the underlying Google Account link with the app. See Google’s official Agent access steps.

2. Remove AI agent access to Gmail and other Google services

For an AI tool that received access through Google’s authorization flow, the central Google Account permissions page is the first place to act.

1. Open Third-party connections while signed into the affected Google Account.
2. Select the AI app or service. If several connection types appear, select the entry showing access to Google Account data.
3. Choose See details or open the permission details panel.
4. Select Remove access, then Confirm.
5. Return to the list and verify that the permission is no longer active.

This revokes the Google authorization previously granted to that app. It does not erase emails from your Gmail, remove the original files in Drive, or automatically delete copies that another service may already have made.

If you’re worried about why an AI agent might have obtained those permissions, read our guide to the risks of giving an AI agent access to Gmail. The main issue is the scope of authorization: reading message metadata is different from reading message bodies or sending email.

3. Disconnect an app from Google Drive

Google Drive also has a Manage apps interface for certain Drive-integrated applications. This is useful when a tool appears in Drive’s ‘Open with’ menu or has a direct Drive app integration.

1. On a computer, open Google Drive.
2. Select the gear icon, open Settings, then choose Manage apps.
3. Find the app you no longer need.
4. Open its Options menu and select Disconnect from Drive, when available.
5. Check the Google Account third-party connections page as well if you previously granted broader access.

These steps are described in Google Drive Help. Not every AI service will appear in Drive’s Manage apps list, so an empty list does not prove that no third-party Google authorization exists. Likewise, removing a shared person’s access to a Drive file is a different action from revoking an application’s account-level authorization.

4. Disconnect Gmail or Drive from ChatGPT

If you connected Gmail or Google Drive in ChatGPT, review that connection in ChatGPT itself. This provides a second place to verify that the service is no longer available through your account.

1. Open ChatGPT and go to Settings.
2. Select Plugins (older interfaces may label this Apps).
3. Open the relevant Google app or plugin and locate Connected accounts or Connection.
4. Use the connected account’s more-options menu and choose Disconnect.
5. Repeat for other Google apps or accounts you intend to remove.

OpenAI’s account-connection instructions explain that this stops future access through the disconnected account. If a work organization uses a separately administered connection or indexed source, the workspace administrator must manage that source separately.

Does disconnecting remove earlier chats? No. Previously generated messages, shared files, and memories are separate controls. Review any conversation containing sensitive copied information and follow the service’s applicable deletion and retention controls. OpenAI’s Google app data FAQ explains those distinctions.

For a broader understanding of what AI browsers can access while signed in, see Are AI Browsers Safe? and our explanation of whether AI agents can see or use your passwords.

5. What if the AI agent has access to other apps?

Google is only one possible identity provider. An AI assistant might connect separately to an email provider, cloud drive, calendar, team collaboration service, or business application. Removing its Google access will not necessarily revoke access granted directly through another provider.

For each service, open its account security or connected-app settings and check authorized apps, integrations, OAuth permissions, personal access tokens, and active sessions. Revoke the connection you no longer need using that provider’s official controls. If a workplace administrator manages access, request that they review the application’s consent and permissions.

Also open the AI tool’s own settings. Some tools offer separate controls for browser extensions, workflows, scheduled tasks, integrations, or saved credentials. Disable tasks that could otherwise try to reconnect or keep processing information.

If the tool was installed as a browser extension, remove or disable that extension when you no longer use it. However, extension removal is not a substitute for revoking cloud-account access.

Microsoft 365 and work or school Outlook accounts

For a Microsoft work or school account, open Microsoft My Apps, locate the application, open its More options menu, and choose Manage your application. The permissions view separates consent you granted yourself from permissions approved by your administrator. Choose Revoke Permissions for permissions you personally granted. If an administrator consented on your behalf, contact the administrator; you may not be able to revoke that access yourself. See Microsoft’s official permission-revocation guide.

This procedure is specific to work or school accounts. Personal Outlook.com/Microsoft-account controls are not necessarily identical, so use the provider’s current account security and privacy settings rather than assuming Microsoft My Apps applies.

Slack AI integrations and connected accounts

In Slack, an AI tool may be installed as a workspace app or connected through an individual authorization. For a workspace app, open the workspace’s Manage apps area, find the installed app, and review its Configuration tab. Authorized members may be able to revoke an individual authorization; workspace owners or app managers may need to remove the integration entirely. Follow Slack’s official app-removal instructions.

If you instead linked a personal third-party account through a Slack workflow, open Profile → Preferences → Connected accounts, find the workflow-connected service, choose Manage accounts, and disconnect it. Consult Slack’s workflow-account instructions. Do not confuse removing a workspace app with withdrawing consent for a single user’s account.

6. What happens after you revoke AI agent access?

Google specifically warns that a third-party app may retain information previously shared with it. If an AI service downloaded a document or stored an email summary, removing permission to make future requests does not necessarily remove that existing copy.

7. Protect your account after removing access

Revocation is a useful privacy step, but it is not a complete response if you believe an account was compromised. Use this checklist:

• Check account activity. Look for unfamiliar sign-ins, devices, security alerts, or unexpected account changes.
• Review Gmail. Inspect forwarding settings, filters, sent messages, delegated access, and any unfamiliar changes.
• Review Drive. Examine recent sharing changes and file activity, particularly for sensitive documents.
• Secure sign-in. Enable strong two-step verification or passkeys where supported. Change your password if you suspect it was exposed, rather than assuming OAuth revocation alone is sufficient.
• Audit remaining integrations. Remove obsolete apps and restrict new permissions to the least access necessary.
• Request data deletion if needed. Use the AI provider’s privacy or account controls to address any copies it retained.

If you use passkeys, compare your options in our guide to passkeys, passwords, and password managers. For general online privacy, review practical ways to protect personal information.

8. How to limit AI app permissions in the future

Use AI integrations only where the convenience justifies the data access. Before choosing Allow on a permission screen, read the requested scope, verify the publisher, and look for a narrower alternative.

Prefer read-only access when you do not need an AI tool to send emails, edit files, or create events. Avoid connecting your main inbox or a folder containing confidential documents for a one-time task if a safer way to share a specific file will work. Where a service supports limited-duration permission, take advantage of it.

For organizations, review administrator-managed application permissions, approved integrations, account ownership, and offboarding procedures. A user disconnecting their personal account may not remove an organization-wide connection.

Can’t find the AI app? Troubleshooting missing connections

If the AI service isn’t listed where you expected, don’t assume access has been revoked. Check the following possibilities before concluding the connection is gone:

• Wrong Google Account: If you have personal, work and school accounts, repeat the search while signed into each relevant account.
• Different connection type: Review Google’s Access to your Google Account, Sign in with Google, and Agent access filters separately. Not all are data-access permissions.
• Connection is managed inside the AI tool: Open the AI tool’s connection or plugin settings, then review each connected account and any automations.
• Administrator-managed app: Your employer or school may have approved organizational permissions that you cannot withdraw personally.
• Browser extension or app password: A browser extension, separate app-specific credential, or saved session may not appear as the same type of OAuth connection. Review that access mechanism independently.
• Google Drive integration only: Check Drive’s Manage apps page if you installed an app directly through Drive.

If you see suspicious sign-ins or messages you didn’t send, use your provider’s account-recovery and security activity tools rather than relying only on app disconnection.

Frequently asked questions

Can I revoke AI access to Gmail without deleting my Google Account?

Yes. Remove the application’s data-access authorization from your Google Account’s third-party connections page. You do not need to close your Gmail or delete your Google Account.

Does removing an AI agent from Google also disconnect it from ChatGPT?

Revoking Google authorization should prevent that authorization from being used, but you should separately disconnect the account inside ChatGPT to keep both services’ connection settings consistent.

Is removing an app from Google Drive enough?

For some Drive-integrated apps it may be sufficient, but also check the central Google Account connections page. An AI service may have broader permissions than its Drive app listing suggests.

Can an AI service keep emails or files after I revoke access?

Potentially. Revocation stops authorized future access; it does not guarantee deletion of already copied or processed data. Read the provider’s retention policy and use its deletion-request process where available.

Does changing my Google password automatically revoke all AI integrations?

Do not rely on a password change alone. Review and remove unwanted third-party authorizations, active sessions, and any app-specific credentials.

Should I stop using all AI agents with my accounts?

Not necessarily. Evaluate each tool’s reputation, requested scope, data handling, and benefits. Retain only the integrations you need and review them regularly.

Bottom line

The safest way to stop unwanted AI account access is to revoke the provider permission, disconnect the account inside the AI tool, and check for retained data or automated tasks. Start with Google Account third-party connections for Gmail and Drive, then review any separate integrations. That three-part approach gives you more control than simply signing out or uninstalling an app.

Updated October 2026. Interface labels and available controls may change, particularly for managed workspaces.