the maker said in the comments that it currently asks for all permissions upfront rather than scoped access per tool - for something that keeps a persistent connection to your accounts and runs unattended, i'd want to grant read-only or per-tool access before trying it with anything real