A personal, self-hosted AI assistant for Google Workspace. It runs on its owner's own computer, talks to Google's APIs directly, and has no hosted backend.
Genandrea Agent is a coding and research agent used by one person: its developer. When asked, it can read information from that person's Google account and write files back to Google Drive. Typical requests are:
The agent process runs locally, on hardware controlled by the developer. It authenticates with Google using OAuth 2.0 and a client owned by the developer. Access tokens and refresh tokens are stored on that same machine with owner-only file permissions. The language model that processes the retrieved text also runs on that machine, so email bodies, document text and calendar entries are not sent to a third-party model provider.
There is no Genandrea Agent server, no account system, no telemetry and no advertising. The only network endpoints contacted are Google's own APIs, plus public web sources when a task explicitly requires a web search.
Access is requested per capability, and read-only capabilities use read-only scopes:
| Scope | Why it is needed |
|---|---|
gmail.readonly | Search and read messages and threads when asked about email. Cannot send, delete, label or modify mail. |
drive.readonly | Find and read files in Drive. Cannot modify or delete existing Drive files. |
documents.readonly | Read the text and structure of Google Docs. Cannot edit documents. |
calendar.readonly | List calendars and read events and free/busy information. Cannot create or change events. |
drive.file | Create files and folders in Drive, and manage only the files this application itself created. Cannot see or touch the rest of the Drive. |
No other Google data is requested. The application does not request access to contacts, Gmail settings, Drive sharing permissions or any write scope for existing files.
How to revoke access. Open Google Account → Third-party access and remove “Genandrea Agent”. Revocation takes effect immediately; the locally stored tokens stop working.
This is not a public service. It is a single-user tool installed by its developer, and it is not offered as a sign-up product. The privacy policy describes exactly what is read, stored and retained; the terms of service describe the conditions of use.