You pass an open api spec on creation. You can remove all methods you fear may be risky, and leave it enough so that he can read your emails or calendar, if you feel comfortable with that
The crazy thing is there is no code! The instructions are just “you are a helpful email assistant. You search the user’s gmail in response to their questions” and you just paste in the OpenAPI spec and OAuth details for gmail into the GPT maker form. I asked GPT-4 to write the OpenAPI spec for the gmail API’s necessary to search my inbox.
You can use it as part of a larger query. Like “look up my tracking numbers and render them in a table with delivery date and current location” or “plot them on a map” or whatever.
So far one thing that was nice is “look up the tracking number for the thing I just bought”
I’ll probably play around with Bard’s gmail integration to find more use cases.