The server offers 45 tools. Each one does one thing, and its own description says whether it only reads or changes something. Your app shows you the list, inputs included, once you’ve connected.
Read (22): every get_… and list_… tool, and search_mail. They change nothing in HEY.
Write (20): drafts (create_draft, reply_draft, update_draft, delete_draft), moving threads between boxes (move_to_…), mark_seen and mark_unseen, labels (add_label, remove_label), Bubble Up (schedule_bubble_up, cancel_bubble_up), screen_out_sender, and to-dos (create_todo, update_todo, complete_todo, uncomplete_todo). They change your own mail, drafts, or to-dos, and reach no one.
Sensitive (3): send_draft delivers email to other people. screen_in_sender lets a stranger’s mail into your Imbox, and what they wrote into your assistant’s reach. delete_todo is permanent. HEY asks you to confirm the first two every time, so they’re offered only to apps that can stop and ask you, which is why ChatGPT and Claude see 43 tools, not 45.