Anthropic has moved Claude out of the draft-only inbox and into live Google accounts. In an August 18, 2026 post, the company said users can ask Claude to reply to a Gmail thread and have the assistant draft and send the response, while Google Drive support now covers day-to-day file work.

Approval stays under user control. The connectors live in Claude’s connectors menu and are listed as available on all paid plans.

Claude can now send emails in Gmail and manage files in Google Drive.

Ask Claude to reply to a thread, and it drafts and sends the response. You control when it needs your approval.

Connect Gmail or Google Drive from the connectors menu to try. Available on all paid plans. pic.twitter.com/cFZEjh3MgB

— Claude (@claudeai) August 18, 2026

That send action is the real change. Earlier Google Workspace connectors already let Claude search mail, write drafts, and pull documents. Sending, forwarding, and changing Drive files turns the assistant into an agent that acts inside a connected Google identity rather than a chatbot that only proposes text.

Claude Can Now Send Emails in Gmail

Anthropic’s help documentation now states that Claude can send, reply to, and forward Gmail, and can share, move, and trash files in Drive. By default, it asks before each of those writes.

On Team and Enterprise, an Owner or Primary Owner must enable the connectors first, and those owners decide whether members may let write actions run without a prompt.

For security teams, the useful part is also the exposure. A model that can press Send, change a sharing link, move a folder, or trash a file can turn a bad parse, a prompt-injection payload sitting in a received email, or a sloppy always-allow setting into a real outbound message or a leaked document. An unsent draft is recoverable.

A sent email or a trashed shared folder is not. Claude still cannot read Gmail attachment contents, only metadata, and it extracts text from Drive files rather than images, comments, or suggestions. Those limits close some quiet exfil paths. They do not shrink the blast radius of send, share, move, or trash.

Anthropic says Claude authenticates through the user’s Google account, sees only that account, mirrors existing Workspace permissions, and retrieves the minimum data needed when the user asks.

Retrieved connector data is stored with the chat on Anthropic’s servers, encrypted in transit and at rest, and can be removed by deleting the chat. The company says it does not train models on Gmail, Drive, or Calendar connector data.

Consumer Free, Pro, and Max users who opted in to training should still treat anything they paste from those services, or any Claude reply that repeats it, as in scope for training.

Google’s OAuth screen already names send permission, which now matches the product instead of sitting unused. Workspace tenants may need an admin to mark Claude as a trusted app under third-party API controls before the connector works. Rate limits, large mailboxes, and some advanced Gmail filters remain rough edges.

The practical advice is boring and correct. Leave approval on for send, share, move, and trash. Do not grant always-allow on a mailbox that handles payroll, legal hold, or customer secrets. Test with a message to yourself before anyone lets Claude touch a live thread.

Treat every inbound email Claude is asked to handle as untrusted input, because the model is now one approval away from acting on it. Connectors that act are more valuable than chatbots that only advise.

They are also a new identity and data-loss surface, and that is the part worth configuring before anyone celebrates the saved clicks.

 Strengthen Your SOC by Accelerating Threat Detection & Rapid Investigations. -> Integrate ANY.RUN With Your SOC Now.

The post Claude Can Now Send Emails in Gmail and Manage Files in Google Drive appeared first on Cyber Security News.