Secure Drive Files Access for AI Agents
Google Drive's OAuth scopes grant access to every file in your account. PortEden sits between your AI agent and the Drive API, enforcing three layers of security: operation permissions, file-level firewall rules, and field visibility controls.
OpenClaw Google Drive CLI
PortEden's OpenClaw Google Drive CLI is a command-line tool that sits between AI agents and the Google Drive API. Install it in minutes, define your security rules for Drive, Docs, and Sheets, and every request from any AI agent gets filtered automatically. No code changes needed on the agent side.
The Problem
Giving AI agents direct access to your data is risky. Here's what can go wrong.
Bulk File Deletion and Modification
An AI agent with Drive write access can trash, rename, move, and overwrite files across your entire account. A single misconfigured automation can destroy years of documents in seconds.
Confidential File Exposure
HR spreadsheets, financial models, legal contracts, and personal files are all accessible through one OAuth token. Agents cannot distinguish between project docs and sensitive files.
OAuth Token Gives Full Drive Access
Google Drive OAuth tokens grant access to every file, folder, Doc, and Sheet. If the agent's environment is compromised, attackers get persistent access to your entire cloud storage.
How PortEden Protects You
Six layers of security between AI agents and your data.
Operation Permissions
Choose from 16 individual operation flags or use presets like read_only, docs_read_only, sheets_all. Each agent gets exactly the operations it needs, nothing more.
File-Level Firewall (Drive Rules)
Control access at the file level with rules based on file ID, folder, or MIME type. Block agents from accessing spreadsheets, specific folders, or any file type you specify.
Field Visibility Controls
Mask sensitive metadata fields like file owners, sharing links, and permissions. Agents see what they need to do their job, not your organizational structure.
Docs and Sheets Security
Granular controls extend to Google Docs content (read, insert, append, find-replace) and Sheets data (read values, write cells, append rows) with separate operation flags for each.
Full Audit Trail
Every file access, search query, and edit operation is logged. Know exactly which files each agent accessed, what data was returned, and what was blocked.
Get Started in 3 Steps
Connect Google Drive
Install the PortEden CLI and connect your Google account via Custom OAuth with Drive scopes.
Set Your Rules
Configure operation permissions, file-level firewall rules, and field visibility for Drive, Docs, and Sheets.
Connect Your Agent
Point your AI agent to PortEden instead of the Drive API. Every request is filtered through your rules with full audit logging.
Without vs. With PortEden
Without PortEden
- Drive OAuth token grants access to every file, Doc, and Sheet in your account
- No way to restrict agents to specific files, folders, or MIME types
- Agents can read, modify, trash, and share any file without limits
- No audit trail of which files the agent accessed or modified
- Revoking access means disconnecting your entire Google account
With PortEden
- 16 operation flags control exactly what each agent can do
- File-level firewall restricts access by file ID, folder, or MIME type
- Field visibility masks sensitive metadata from agent responses
- Full audit log of every file access, search, and edit operation
- Per-token revocation without disconnecting your Google account