Show HN: Nonce – Open-source, least-privilege Gmail access for AI agents

Category: security

Tags: ai-agents, security, gmail, least-privilege, oauth

Score: 6.7/10 (Innovation: 7, Technical: 6, Documentation: 3, Utility: 7)

Nonce is an open-source proxy that enforces least-privilege access to Gmail, Calendar, and Drive for AI agents by requiring them to justify their intent and issuing scoped, time-limited tokens. It scores search queries against the user's original question and combines the token's scope with the agent's query to prevent privilege escalation, with notification-based approval for suspicious access. The project addresses a real security gap in agent-based data access, though it relies on the agent's self-reported intent and cannot verify the user's original request.

Target audience: backend developers, security engineers, AI agent developers, privacy-conscious users

Repository: https://www.anonce.io/

View on Hacker News