Extro separates public discovery from connected-account actions so an assistant requests access only when a traveler asks it to work with their data.
Public without account access
City guides and public event/place search do not expose private lists, saved items, profiles, reservations, or account data.
Connected actions
Connected tools receive narrow permissions for lists, events, or places. Agents should request only the permissions required for the task and explain the action before writing.
Safe defaults
- New agent-created events and places are private.
- New lists are excluded from public search.
- Exact retries use stable request IDs to prevent duplicates.
- List changes are limited to lists owned by the connected user.
- Dates, prices, hours, and availability are treated as time-sensitive.
Traveler control
The traveler can review and edit the result in Extro, and can immediately remove an agent under Settings → Apps and AI agents. Public guide publication requires a separate creator/editor decision.