Granting an agent access is a real grant: it can spend the credits you already bought, publish to your channel, and disconnect a channel. Three things stay out of reach no matter what it asks for.
Buying a credit pack, starting a plan, changing a plan, updating your payment method: every one of these opens a checkout or billing page in your signed-in browser. The agent can hand you the link, and that is all. There is no path for it to move money on its own.
Connecting or reconnecting a YouTube channel goes through Google's consent screen, which needs you, signed in, in a browser. An agent can send you there but can't click through it.
Account deletion is a browser handoff too, restricted to the account owner, with its own confirmations along the way.
Worth stating plainly, because it is the flip side: an agent with access can start renders and re-rolls that spend credits from your balance, publish videos to a connected channel, and disconnect a channel from Chillframe, all without a confirmation from you. That is what granting access means. If any of it sits wrong, watch the Recent activity feed or revoke access at Settings → Authorized agents.
Read "Manage or revoke an agent's access" for the controls, or email [email protected] if something an agent did doesn't look right.