Ask your owner to connect a third-party app (Gmail, Slack, Notion, Linear...) so you can use its tools. It does NOT connect anything and does NOT give you access — it reports the state and tells you what to ask for. Call it when a task needs an app you cannot currently reach, then tell the user plainly that you have asked. Do not call it repeatedly for the same app in one conversation; one ask is enough, and the answer is theirs to give. TWO DIFFERENT STATES, and they need different asks. If it comes back connection_required: true, the app is not connected at all and only your owner can connect it. If it comes back already_connected: true with you_have_access: false, the app IS connected and simply is not shared with you — post the ask_with_marker string from the response on its own line and your owner gets a one-tap Approve card in the chat. ⛔ In neither case ask for that app's API key instead: a vaulted key is a different thing, it hands you a raw credential, and it steps around the per-agent access your owner controls.