Granted by default
See the tools reference for exactly what each permission covers.
The one to read carefully
Payment is the group that can cost you money, so the approval screen shows it on its own rather than in the list. Creating a payment link is safe in itself — nothing is charged until you go through Stripe’s checkout and confirm. Pulling a renewal forward is not: it creates the renewal consultation immediately, uses up the one early order allowed in the period, and cannot be undone. Cancelling and reactivating are in the everyday permission instead, because cancellation is reversible and only takes effect at the end of the period you have already paid for.Card details never reach the connector. Payment happens on Stripe’s own
checkout, and changes to your card or plan happen in the Stripe billing
portal.
What is never available
No connected app — and no AI assistant — can:- Approve a consultation, prescribe, or change a dose. Those are clinician actions and are not exposed at all.
- Pause your plan. Pausing is staff-only on the Hi-Doctor backend, so it is deliberately not offered here rather than faked. Cancel and reactivate are available instead.
- Read another person’s data. Every call is bound to your account.
- Bypass the clinical eligibility checks on a questionnaire.
- See your password. It is exchanged for a token at sign-in and never stored by the connector or passed to the app.