WardGate is a go binary, for which you can define endpoints that your AI Agent can use. It passes the request on as-is (as long as it's allowed), so the agent can just do its regular curl calls or use API libraries (but with a different endpoint URL).
And you can then limit the endpoint (e.g. Google Calendar), to just allow reading, but not deleting.
It has special adapters for SMTP and IMAP, so you can allow access to certain folders, or only send e-mail (via the official hooman's account) after said human's approval.
It's making my life with OpenClaw (and Claude, Codex, etc) much more bearable.
Open for contributions, additional API presets, suggestions, improvements, et al!