Skip to main content
Connect an MCP server, Gmail, Slack, and similar HTTPS endpoints, so an agent run can call its tools mid-task. Connecting one gives an agent reach outside the browser, so this step is human-only: it has no MCP tool. A run only reaches an integration it is explicitly given at submit time; connecting a server to the workspace is not the same as giving a specific run access to it.
transport.url must be a public HTTPS address. auth.kind is bearer, header (with a header name) or none, and tools is a list of tool names, or null for every tool the server offers. auth.secret is a name from your secrets, never a raw token. integrations.list is the blast radius: every connected server, its tools, and the name it authenticates with, everything an agent could reach outside the browser if a run named it. integrations.delete disconnects a server; the underlying credential is untouched, it lives in secrets and is deleted there separately.