diff --git a/agent.py b/agent.py
index 062f4c1..1f3d48a 100644
--- a/agent.py
+++ b/agent.py
@@ -462,7 +462,7 @@ class CustomerIntegrationEngineer(A2AAgent[CustomerIntegrationEngineerConfig, No
             required_setup=required_setup,
         )
 
-    @a2a.tool(description="Generate a minimal workspace-contained connector scaffold with no deployment or repository mutation", timeout_seconds=120, idempotent=True, max_retries=0, cost_class="deterministic")
+    @a2a.tool(description="Generate a minimal workspace-contained connector scaffold with no deployment or repository mutation", timeout_seconds=120, idempotent=True, max_retries=0, cost_class="deterministic", grant_outputs_prefix="outputs", grant_write_prefixes=("outputs/integrations",))
     async def generate_connector(self, ctx: RunContext[NoAuth], request: GenerateConnectorRequest) -> GenerateConnectorResult:
         req = request.requirements.model_copy(
             update={"dry_run": _effective_dry_run(self, request.dry_run, request.requirements.dry_run)}