Show HN: Nonce – Open-source, least-privilege Gmail access for AI agents

Hi HN! We built nonce, an open-source tool that sits between personal AI agents (Muse, Grok, ChatGPT, Claude) and your personal data in Gmail, Calendar, Drive and more.Today, if you connect Gmail to an AI agent like Muse, it can read your entire inbox. Whether on purpose or not, they can read far more emails than needed. This poses a huge data-privilege risk, in which personal data is accessed without limits.With nonce, the AI will no longer hold your Google or Slack tokens. To read anything, it has to show its intent first:User's question: When does my flight to Tokyo leave?
Agent's justification: Need the airline confirmation email
Agent's search query: from:united.com Tokyo
Access needed: 10 minutesIf the justification and search query are reasonable, nonce issues a scoped token to the AI Agent. AI Agent can only query data using a token.If something looks fishy, i.e the AI is acting on its own, wants too much, or wants sensitive emails like bank statements, medical results, or password resets. nonce sends you a notification to approve or deny.By default, nonce denies massive crawling behaviorsHow it works
1. nonce scores each search against your original question before…