
Is it safe to give an AI access to your email? Prompt injection explained
Prompt injection, permissions, read-only access and drafts: what can go wrong when an AI reads your mail, and how to limit the risk before you connect.
Giving an assistant access to your email or your messages raises fair questions. What can it read, what can it change, and what happens if a message contains instructions written to trick it? This category answers them plainly. You will find how prompt injection works and how to limit it, how to choose which tools an assistant is allowed to see, and why some sources such as Telegram are connected read-only. It also covers the shared memory Fezola keeps for Claude, ChatGPT and your other assistants: one place where useful facts are stored, which you can read, edit and erase at any time. By default, replies are created as drafts and never sent. Start with the article on giving AI access to your email safely.
New to Fezola? What is Fezola · Step-by-step guides

Prompt injection, permissions, read-only access and drafts: what can go wrong when an AI reads your mail, and how to limit the risk before you connect.

Fezola Memory lets every assistant recall what you told another one. How it works, how it is filed by project, and how to view, edit or erase it.

Connect only trusted MCP servers, check permissions, limit tools, keep approvals on and know how to revoke. A checklist from official sources, Nov 2026.
3 min read

How a memory MCP server gives Claude and ChatGPT one shared memory: five tools, filing by project, and five things to check before you trust one.
2 min read

How Claude's and ChatGPT's memories work, why each keeps its own slice, and how Fezola Memory gives both one shared, encrypted memory you control.
2 min read

With Fezola you tick which tools each assistant sees (Mail, Calendar, Google Ads, Notion...). Unticked tools are invisible. How it works and its limits.
2 min read

Most Telegram MCP servers can send messages and mark chats as read. Read Telegram in Claude or ChatGPT safely, read-only: what it can and cannot do.
4 min read