Claude Code artifacts can now call your connectors: Gmail, Calendar, Slack, Notion. I built one to see exactly how the permissions work. Three things to know before you approve one. 1. It runs as you, not the author. Every call uses the credentials of whoever opens the page. The same artifact shows each viewer their own data, and none of it goes back to the author. 2. The page is limited to what it declared. It can only call the exact tools it listed when it was published. Anything else is refused, and it never sees your login. 3. Consent is per connector, not per action. I gave my test page a tool that writes drafts to Gmail. The approval box said "Gmail." Reading your mail and writing to it share the same checkbox, so "approve Gmail" means "approve whatever this page was built to do." 4. Artifacts with connectors can't be shared publically. Still, they can be shared with everyone in the organization. Before you approve one, the box names a connector, not the actions behind it. The trust is in who built the page, not the word on the button.