You pass an open api spec on creation. You can remove all methods you fear may be risky, and leave it enough so that he can read your emails or calendar, if you feel comfortable with that