Skip to content
HeyMetra
Menu
Sign in See pricing

Access and actions

HeyMetra connects the accounts you already run your business on to your AI assistant. This page says what your assistant can do there, what it cannot, and who decides.

Last updated

  • Works with 8 AI assistants
  • Store, CRM, subscriptions and search
  • One connection, all of them at once
  • It can read; changes need your approval
  • Your logins stay with us, not with the assistant
  • Change assistants without reconnecting anything

Credentials, data and access

You choose: read, or read and write

Every account you connect starts read-only. Your assistant can look at it, and nothing it asks for can change it. If you want it to act there too, for example to pause an ad or move a budget, you give write permission on the provider’s own screen. An account connected with an API key can never do more than that key allows.

A write waits for a person

When your assistant asks to change something, nothing changes yet. You see the exact edit, the current value, the proposed value and how to reverse it. Nothing reaches your account until you approve that specific change.

What you approve is exactly what runs. The assistant does not get a second chance to decide after you say yes, which is what makes the approval worth anything: you are approving an action, not the assistant’s intentions.

We draw the line, not the provider

“Read my spend” and “change my spend” are different questions, and on several platforms the provider’s own permission screen cannot tell them apart. Google, for one, grants reading and changing Google Ads together, with no read-only option to ask for. So the provider’s permission cannot tell you what your assistant will be able to do, and we would rather say that than pretend.

So we draw the line ourselves. An account you have not opened for changes cannot be changed through HeyMetra, whatever the provider would technically allow.

Where you have opened it, your assistant can only suggest a change. The approval above decides what reaches the account: one change, the one you read, at the moment you say yes.

Questions this page does not cover

If your evaluation needs something specific, such as a particular control, a data residency requirement or a compliance questionnaire, send it to us and we will answer it directly rather than guess at it here. Knowing which requirement matters to you is genuinely useful to us.

Frequently asked

Does HeyMetra need write access to my ad accounts?

Not unless you give it. Every account starts read-only. Some platforms cannot grant reading without writing: Google gives both on a single Ads scope. So we draw the line ourselves: an account you have not opened for changes carries nothing your assistant could use to make one, and an account you have opened still sends every change to a person for approval first.

Can a tool call change something without asking me?

Not in a connected account. A change there is held for your approval, and what you approve is recorded exactly as you saw it; the model does not get to decide again after you approve. A message to the Slack channel, Telegram chat or email address you linked goes straight out, unless you switch on Ask before sending for that connection. An email to an address you did not save always waits for you.

Does HeyMetra store my passwords?

No. Connections that use OAuth are authorised on the provider’s own sign-in screen, so we never see the password. Access tokens and any API key you paste in are stored encrypted, and are never shown back to you or written to logs.

Is my data used to train a model?

Not by us: we do not operate a model. A tool result is read from your account and returned to the assistant you asked in. What that assistant does with it is governed by your agreement with its operator, and that is the agreement to read on this question.

What happens if the model calls the wrong tool?

For a read, nothing lasting: you re-ask and the mistake evaporates. For a write, what you see before anything happens is the current value, the new value and how to reverse it.

Something here not answered? Ask us. Security questions reach a person, not a form.

One connection, both sides of the question

Connect your accounts once, then ask from the assistant you already pay for.

Try free for 7 days See the connectors