Give your AI its own login in ClickUp, Slack and HubSpot

Your AI gets its own user with limited access, and you can read what it did and switch it off.

Your login, sharedToo wide
You + AI
Client projectTeam channelDealsPayrollPrivate messagesBilling
Its own loginJust enough
YouAI Assistant
Client projectTeam channelDealsPayrollPrivate messagesBilling
Sees what it should not Shared with it Not shared
  1. On your shared login, the AI can open everything you can: the client project, the team channel, deals, and also payroll, private messages and billing.
  2. On its own login, the AI opens only the client project, the team channel and deals.
  3. Payroll, private messages and billing stay locked, because you never shared them.
25 min per toolNo code

You need

  • Admin access in your tool
  • A spare email address
  • Claude (paid plan for HubSpot)
  • A private window (Incognito)

You wouldn't hand a new hire your own password. You'd give them their own login, with access to only what they need. Your AI should get the same.

On your login, your AI moves tasks, posts in chat and edits deals as you, and it sees everything you see.

This guide gives it its own limited user in ClickUp, Slack and HubSpot. You can see what it did and switch it off without touching your account.

01 / 07

Before you start

A connector links Claude to a tool, and Claude gets the access of whichever account signs in to it. Sign in as you and it gets your access. Sign in as the AI user and it gets only that user's limited access (Anthropic).

A connector belongs to your Claude account. The sign-in you connect is used on the web, in the desktop app and in Claude Code until you disconnect it (Claude Code docs). On Team or Enterprise, a Claude Owner may need to turn a connector on first (Anthropic).

Get a spare email

The AI user needs its own email address, because ClickUp invites people by email. Create a free Gmail or Outlook address before you start. Don't use one that ends in your company's web address, because addresses on your own domain become paid limited members. Name the user AI Assistant in every tool.

Give the spare email its own password and turn on two-step sign-in. It now holds the AI's access.

Check the seat cost

An extra user can count as a paid seat. Check your own billing page after you add the user.

User typeCost on 2026-09-30
ClickUp view-only guestNo fee on paid plans, view only. Give it Comment, Edit or Full edit and it becomes a permission-controlled guest, priced like a member unless your plan still has a free guest seat of that type
ClickUp limited memberPaid. Unlimited $7 per user per month annual, $10 monthly. Business $12 annual, $19 monthly
Slack memberBilled when active in a 28-day window. Rate is on your Slack billing page
HubSpot View-Only SeatFree and unlimited
HubSpot Core SeatPaid. Rate is on your HubSpot plan page

Sign in as the AI user

Connect a tool as the AI user

Do these steps once per tool, after you create the AI user in it. Connectors work on every Claude plan, Free included. On Team and Enterprise, an Owner has to turn a connector on for the organization first (Anthropic).

  1. Open a private window (Incognito in Chrome).

  2. In that window, sign in to the tool as AI Assistant.

  3. In the same window, go to claude.ai and sign in with your own Claude account.

  4. In the side panel, click Customize › Connectors › Discover.

  5. Search for the tool.

  6. Click Connect to Claude.

  7. Read the account name on the approval screen. If it says AI Assistant, approve. If it shows your name, cancel and repeat step 2.

You should see the tool listed as connected in Claude.

Fig 1.1Illustration of the approval screen in a private window, showing the AI user

Using another tool

ClickUp, Slack and HubSpot have full steps below. For any other tool, apply the same four rules:

  • Separate user. Give the AI its own user, never your login.
  • Least access. Security teams call this least privilege. No admin, no delete. Share only what the job needs.
  • A history you can read. Find where the tool shows what that user did.
  • One switch. Know how to turn that user off without touching yours.

02 / 07

ClickUp

ClickUp

At a glance

Role
View-only guest
Cost
No fee on paid plans
Watch
Can become a paid seat once it gets Comment, Edit or Full edit

ClickUp's Claude connector is limited to what your assigned user account allows. You sign in through ClickUp, so Claude never sees your password. As of September 2026.

  1. Click your Workspace avatar (top left), then People.

  2. Enter the spare email.

  3. Pick the role. Start with a view-only guest (no fee). Use a limited member only if the AI must comment. That is a paid seat.

  4. Click Invite people.

Fig 2.1Illustration of the People screen with the AI user's email entered in the invite box

Limited members and guests see nothing until you share it with them. ClickUp has four levels: View only, Comment, Edit and Full edit.

  1. In the private window, open the spare inbox and accept the invite.

  2. Set the name to AI Assistant.

  3. Back in your own window, open the one List or Folder the AI needs (guests can't be given a Space).

  4. Click Share.

  5. Add AI Assistant at View only.

Fig 2.2Illustration of the sharing dialog for one List, with the AI user set to View only
  1. Connect ClickUp as the AI user, using the steps in "Connect a tool as the AI user".

  2. Skip ClickUp's API token (Settings, Apps, API Token). The connector doesn't need one.

Fig 2.3Illustration of Claude's Connectors screen with ClickUp added

Every task has a running log of task activity on its right side.

03 / 07

Slack

Slack

At a glance

Role
Member in named channels
Cost
Billed when active
Watch
Members can join any public channel

Slack's Claude connector signs in as a person, so Claude acts as whichever Slack member signs in. Your Slack Workspace Owner or app manager may need to approve the connection first. As of September 2026.

  1. Invite the spare email as a regular member. Slack bills active members, so check your billing page afterwards.

  2. In the private window, open the spare inbox and accept the invite.

  3. Name the user AI Assistant.

  4. Back in your own window, add it to the named channels it needs. Leave the AI out of private channels unless it needs one.

Fig 3.1Illustration of a channel's member list with the AI user in it

You should see AI Assistant in the member list. Members can join any public channel, so adding it to one channel doesn't stop it reading others. Slack has no read-only member. It can post in every channel it joins.

  1. Connect Slack as the AI user, using the steps in "Connect a tool as the AI user".

Where to see what it did: read the channel's message history for what it sent. On Pro, Business+ and Enterprise, access logs (Admin › Workspace settings › Security › Access logs) list sign-in times, IP addresses and devices, not actions. On Enterprise, audit logs record actions.

04 / 07

HubSpot

HubSpot

At a glance

Role
View-Only Seat
Cost
Free and unlimited
Watch
A Super Admin approves the connector first

HubSpot's Claude connector respects the permissions you set on each user. It needs a paid Claude plan (Pro, Max, Team or Enterprise) and has no delete. As of September 2026.

  1. Open your user settings.

  2. Create a user with the spare email. You need Super Admin or the Add and edit users permission, per HubSpot's permissions guide.

  3. Pick the seat. A View-Only Seat is free and unlimited and cannot edit records. A Core Seat is paid.

  4. Set permissions per object: View on Contacts and Deals, nothing on the rest.

  5. If you use teams, limit View to that team's records.

  6. Leave Delete off.

Fig 4.1Illustration of the new-user screen with the seat type and permission set for the AI user

A pipeline limit does not hide records. On Professional and Enterprise, a Super Admin can limit who works in a pipeline, but reports and search still show those records. Use View permissions instead (steps 4 and 5). The connector respects them.

  1. Approve the HubSpot connector first. A Super Admin does this by connecting HubSpot to Claude once under their own login (HubSpot's steps). Only Super Admins and users with App Marketplace Access can connect without that approval.

  2. If you connected under your own login, open Customize › Connectors in Claude, open HubSpot and click Disconnect, so the AI user can take its place.

  3. Connect HubSpot as the AI user, using the steps in "Connect a tool as the AI user".

Don't make the AI user a Super Admin to skip step 7.

You should see the new user in your user list with the seat you chose.

Where to see what it did: a Super Admin opens settings, then Account Management, then Audit Logs. It shows 30 days. Connector create and update actions appear under both the user and the Claude connector. Reads are not logged. Record changes appear on Professional and Enterprise only.

Fig 4.2Illustration of the Audit Logs filtered to the AI user

05 / 07

Check it worked

One free test in ClickUp, about 5 minutes.

  1. Create a task called AI test in the list you shared.

  2. In your usual Claude window or the desktop app, start a new chat.

  3. Click + ("Add files, connectors, and more") at the lower left of the message box.

  4. Click Connectors.

  5. Toggle ClickUp on.

  6. Paste this into Claude.

Free check: who is signed in
Read the ClickUp task AI test and tell me which ClickUp user you are signed in as. Change nothing.
98 characters

Claude should name AI Assistant. If it names you, redo the sign-in. If Claude can't say, use the comment test below.

Comment test: give AI Assistant Comment access to the task, then paste this. If it is a view-only guest, that makes it a paid seat.

Comment test (needs Comment access)
Open the ClickUp task named AI test. Add one comment that reads: Test from the AI user, safe to delete. Change nothing else. Then tell me which ClickUp user you are signed in as.
178 characters

After the comment test, open the task and find the comment in its activity on the right.

Fig 5.1Illustration of task activity showing the comment under the AI user's name

DiagramWho did what, and one switch

Task activity
AI Assistant added a comment9:02
You approved the draft9:15
AI Assistant moved the task9:16
Admin settings
AI AssistantActive Off
Switch off one user. Your own login keeps working.
  1. The task history shows AI Assistant's actions under its own name, next to yours.
  2. In admin settings, you can deactivate the AI Assistant user on its own.
  3. Your own login keeps working.
Fig 5.2Who did what, and one switch

Now test the limit. Paste this into Claude.

Limit test
Open the ClickUp task {TASK IN A LIST YOU DID NOT SHARE} and tell me its title. Change nothing.
95 characters

It should say it can't. If it opens the task, go back to the share settings.

In the other tools:

  • Slack: create a channel called ai-test, add AI Assistant, then ask Claude to summarize ai-test and say which Slack user it's using.
  • HubSpot: create a contact called Test Contact, ask Claude to change its job title, and it should be refused on a View-Only Seat. If it works, fix the seat first.

06 / 07

What to withhold, and the monthly check

DiagramHow much access to give

ClickUp
Admin
Member
Limited memberif it must comment
View-only gueststart here
Slack
Admin
Member, all channels
Member, named channelsstart here
HubSpot
Super Admin
Core Seat, full edit
View-Only Seatstart here
Top: opens the mostBottom: opens the least
  1. ClickUp, widest to narrowest: Admin, Member, Limited member, View-only guest. Start at View-only guest.
  2. Slack, widest to narrowest: Admin, Member, all channels, Member, named channels. Start at Member, named channels.
  3. HubSpot, widest to narrowest: Super Admin, Core Seat, full edit, View-Only Seat. Start at View-Only Seat.
Fig 6.1How much access to give

Always withhold these, in every tool:

Do this now0 / 9 done

Once a month, spend 10 minutes on access. The weekly check of what the AI did is in the guardrails guide.

  1. ClickUp: in People, confirm AI Assistant is still a guest or limited member.

  2. Slack: confirm AI Assistant is still a regular member, in only the channels it needs.

  3. HubSpot: in user settings, confirm AI Assistant still has its seat, View on only the objects it needs, and Delete off.

  4. In Claude, ask: "Which ClickUp user are you signed in as? Change nothing." It should name AI Assistant.

  5. Remove any access it no longer needs.

  6. Open each billing page and confirm the seat count.

To stop the AI, deactivate or remove its user. In ClickUp: People, find AI Assistant, open its menu, then deactivate or remove it. In Slack and HubSpot, do the same in your admin settings. Your own login keeps working. Also, in Claude, open Customize › Connectors, open the tool and click Disconnect.

Fig 6.2Illustration of the AI user's row in the admin settings, with its menu open

Finish line

What to do next

Pick the one tool your AI touches most. Open its chapter and do every step. Set aside 25 minutes. Give it less than you think it needs. You can always add access later.

You reached the end of the guide