Nylas launches IAM with scoped API keys for services and AI agents touching email and calendar data

Nylas has launched IAM, an identity and access management offering that issues scoped API keys for every service and AI agent working with email and calendar data.

The core of the release is the scoped API key: instead of one broad credential that can reach everything, each caller gets a key limited to a defined scope.

Email and calendar data tends to be among the most sensitive information a company holds, covering schedules, contacts and correspondence. As more AI agents are wired into those systems, who is accessing what becomes a question that has to be answered.

By addressing the problem at the key level, Nylas pushes access control down to the point of connection, so every caller maps to an explicit and reducible grant.

For developers, the value is that an agent's boundaries can be written into configuration rather than left to the agent's own restraint.

What to watch next is whether per-agent scoping becomes the default norm for email and calendar APIs, and how quickly enterprise customers adopt it.

Public information so far centers on the IAM capability itself, with the details of key management and integration still to be spelled out by Nylas.