Breakcold's REST API and MCP inbox read endpoints now enforce conversation level access for user actors. Record conversation lists filter out conversations the authenticated user cannot read, and message list and detail requests reject inaccessible conversations, while application actors keep organization scoped inbox access.
AI agents and scripts connected through MCP or the API as a user can no longer read inbox threads that user is not permitted to see, which narrows what an assistant can pull from shared LinkedIn, email and WhatsApp conversations.