Managed connections to external services.
Overview
Integrations are managed connections to external services. Instead of manually copying tokens, you authenticate through OAuth or service-specific flows.
Available Integrations
Two options for Google services:
| Integration | Services | How it works |
|---|---|---|
| Service Account | Sheets, Docs, Drive | Share files with a dedicated email |
| OAuth | Gmail, Calendar, personal Drive | Sign in with your Google account |
Slack
| Integration | Services | How it works |
|---|---|---|
| OAuth (BYOK) | Messages, Channels, Events | Use your own Slack app |
Discord
| Integration | Services | How it works |
|---|---|---|
| OAuth (BYOK) | Messages, Servers, Bot Events | Use your own Discord bot |
X.com (Twitter)
| Integration | Services | How it works |
|---|---|---|
| OAuth (BYOK) | Tweets, Users, Timelines | Use your own X Developer app |
Google Cloud Platform
| Integration | Services | How it works |
|---|---|---|
| GCP (BYOK) | Vertex AI, BigQuery, Cloud Storage, Pub/Sub | Connect your own GCP project |
Integration Types
| Type | Description | Example |
|---|---|---|
| OAuth | Sign in and authorize access | Google OAuth |
| OAuth (BYOK) | Use your own app credentials | Slack, Discord, X.com |
| Service Account | Dedicated email you share resources with | Google Service Account |
| Cloud (BYOK) | Connect your own cloud provider project | GCP Vertex AI, BigQuery |
What is BYOK?
Bring Your Own Key (BYOK) means you create your own app/bot in the service's developer portal and use those credentials. This gives you:
- Isolated events — only receive events from your workspaces/servers
- Full control — configure permissions, webhooks, and triggers yourself
- Your rate limits — not shared with other users
- Custom branding — your bot name and avatar
- Your billing — for cloud providers like GCP, use your own quotas and billing
Security
| Feature | Benefit |
|---|---|
| Token encryption | OAuth tokens encrypted at rest |
| Auto-refresh | We handle token expiration |
| Granular permissions | Request only the scopes you need |
| Revocable | Disconnect anytime from Settings |
Using in Apps
Apps declare integration requirements:
1requirements:2 integrations:3 - key: google.sheets4 description: Read sales data from Google Sheets5 6 - key: slack.channels.write7 description: Send notifications to Slack8 9 - key: gcp.vertex_ai10 description: Use Vertex AI models (Gemini, etc.)11 12 - key: x.tweet.write13 description: Post automated updates14 optional: trueWhen you run the app:
- We check if you have the required integration connected
- If not, you'll be prompted to connect it
- Once connected, credentials are injected automatically
Connecting Integrations
Standard OAuth (Google)
- Go to Settings → Secrets → Integrations
- Find the integration you need
- Click Connect
- Complete the OAuth flow
- Done!
BYOK Integrations (Slack, Discord, X.com)
- Create an app in the service's developer portal
- Configure OAuth redirect URLs and permissions
- Go to Settings → Secrets → Integrations
- Click Configure and enter your credentials
- Click Connect to authorize
- Done!
GCP WIF Integration
- Configure Workload Identity Federation in your GCP project
- Create a service account with required permissions
- Go to Settings → Secrets → Integrations
- Click Configure and enter your project details
- Click Connect to verify
- Done!
See the GCP Setup Guide for detailed instructions.
Next
→ Google Service Account
→ Google OAuth
→ Google Cloud Platform
→ Slack
→ Discord
→ X.com