To connect your Gmail inbox to an AI agent without giving your usual password, create a 16-letter code once on the Google app passwords page: Muzau guides you step by step. The code is saved only after a successful connection test, it is kept encrypted, never shown again, and deleted when you disconnect the mailbox. The agent follows the emails you entrust to it, and you choose what goes out without your approval.
A Google account password does not just open the mailbox: it also opens the calendar, Drive and the account settings. Handing it to a tool gives it far more than it needs. To take its access away one day, you would have to change that password everywhere you use it.
Google does not accept that password anyway for software like Muzau to read a mailbox. It asks for an app password: a separate code that you create for one tool, and that you can delete at any time without changing your password or cutting off your other tools.
You type your address: Muzau checks where it is hosted and shows only the step that mail provider asks for. A Gmail or Google Workspace address leads to the Google guide. An Outlook or Microsoft 365 mailbox goes through the Microsoft sign-in, with no code to create (see connecting Outlook or Microsoft 365), and a mailbox at OVH, IONOS or Orange connects with its own password. The mailbox is connected only once, from the Tools page, for all your agents.
The guide opens the Google app passwords page. You type “Muzau” as the name, click “Create”, then paste into Muzau the 16-letter code that appears, with or without its spaces. If Google says this setting is not available, 2-step verification is not turned on for the account. On a work address, the administrator may have turned these codes off: they can allow them. An account under Advanced Protection cannot be connected this way.
Muzau saves nothing before a successful connection test: a badly copied code is not kept. The code is then stored encrypted, and it is never shown again or written to a log. If it is refused later, because you deleted it at Google for example, Muzau erases it instead of retrying, so the mailbox does not get blocked, and warns you: the mailbox appears as “to reconnect”. Disconnecting the mailbox in Muzau deletes the code.
Connecting the mailbox changes nothing on your side: no email is marked as read, and Muzau reads only the names of attachments. No email from before the connection is handled without you. The text of an email is read only for an email to review or follow up, or if you turn on mailbox sorting. When connecting, Muzau rereads the sending address of a few recent sent emails, to learn your sending addresses. The agent's reply then goes out from the address the customer wrote to, if Muzau has seen it in your sent emails. Gmail files it in your Sent folder. The agent replies only to the emails you entrust to it, alongside your team. The “Email follow-ups” agent submits each follow-up to your approval at the start: see automatic follow-ups from Gmail.
With Muzau or any other software, this code is managed like a key you lend: one per tool, taken back as soon as it is no longer needed.
Preferably connect the mailbox where customer requests arrive, a shared address like contact@, rather than a personal mailbox mixed with private emails. To know which emails an AI can answer, and which to keep for yourself, see can an AI answer your customers' emails.
Autonomous does not mean unchecked. You set the level of autonomy of every agent, its limits cannot be crossed, everything it does is recorded in a plain-language log, and one gesture stops it all.
For the tasks you don't have time for. You give the address of your website, then describe the work in your own words. Nothing to install.