Rules for every connector
- Who sets it up. An admin or owner creates a connection. Builders can use it in agents and workflows. Connections belong to one workspace.
- Credentials. They are encrypted when saved, and cannot be read back. Agents never see them.
- Reading. A read action runs without asking. What an agent reads goes to your AI model provider.
- Changing. In a chat, an action that changes data waits for a person. In a workflow's agent step, it is refused. A connector step runs it as built, so put an approval step before it.
- Once only. A connector step that changes data runs at most once. If it is unclear whether it got through, the step fails and says so.
- Network. Connectors cannot reach private addresses unless the server's operator allows the host with
ALLOWED_PRIVATE_HOSTS. In hosted mode they cannot at all, so internal databases and servers are out of reach. - Least access. Give each connection the smallest access that does the job. This is your strongest protection.
Hosted and self-hosted get the same connectors.
All connectors
26 connectors
Web and custom
HTTP APICall any web API. Credentials only ever go to the address you set here.
- Depends on the method
- Send a request
- Credentials and settings
- Base URL; Authentication (none, bearer, basic, header) (optional); Token or password (optional); Username (optional); Header name (optional)
- Safe defaults
- Credentials go only to the base address you set, and a path cannot leave it. Redirects to another origin are refused. Authorization, cookie and similar headers cannot be set by a step. GET and HEAD count as reading, and every other method counts as a change.
Custom MCP serverPaste the URL of any MCP server. Each of its tools stays off until a person turns it on.
- Changes
- Use a reviewed tool
- Credentials and settings
- Server URL; Access token (optional)
- Safe defaults
- Each tool stays off until a person reads it and turns it on. New and changed tools stay off. Each call checks the tool still matches what was reviewed. In chat, each use asks first, because nothing says what an outside tool changes. Only servers reached over HTTP(S) work, using the Streamable HTTP transport. Tools that run as a local process are not supported.
EmailSend through SMTP and read through IMAP. Works with Gmail or Outlook using an app password.
- Reads
- List unread email
- Changes
- Send an email
- Credentials and settings
- SMTP server; SMTP port (optional); IMAP server (to read mail) (optional); IMAP port (optional); Username; Password or app password; Send from; Only send to these domains (optional)
- Safe defaults
- Set Only send to these domains, so a manipulated agent cannot mail data elsewhere. It is empty by default, which allows any address. Sending requires TLS, unless the operator allowed the host. Only an admin can use the read action, or add a mailbox trigger, because the results show whole messages. Gmail and Outlook need an app password, and neither has been tested.
Databases
DatabaseQuery PostgreSQL or MySQL. Read-only unless you turn on writes for this connection.
- Reads
- Read data
- Changes
- Change data
- Credentials and settings
- Type (postgres or mysql); Host; Port (optional); Database; User; Password (optional); Use TLS (optional); Allow changes (optional)
- Safe defaults
- Read-only unless you turn on Allow changes. Reads run in a read-only transaction, one statement at a time. TLS is on by default and the certificate is checked. Results stop at 1,000 rows, and statements at 30 seconds. Placeholders are refused in SQL, so use
$1and the values list. Use a database account with only the access it needs.
Chat and messaging
SlSlackPost messages and read channels with a Slack bot.
- Reads
- Read recent messages
- Changes
- Post a message
- Credentials and settings
- Bot token
- Safe defaults
- Use a bot token with only the scopes you need.
TeMicrosoft TeamsPost messages to a Teams channel through a workflow webhook.
- Changes
- Post a message
- Credentials and settings
- Webhook URL
- Safe defaults
- Posting only. The webhook address must be a Microsoft one, on
webhook.office.com,logic.azure.comorapi.powerplatform.com.
WhatsAppSend and receive messages through the official WhatsApp Business Cloud API.
- Changes
- Send a message
- Credentials and settings
- Access token; Phone number ID; App secret; Verify token
- Safe defaults
- Used by channels. The list of allowed numbers starts empty, and other numbers get no reply. Every incoming message is checked against the app secret. Only text messages are read. Needs a public HTTPS address, and the Team or Business plan on a hosted server.
TelegramSend messages from a bot. Text goes out as written, with no formatting and no link previews.
- Changes
- Send a message
- Credentials and settings
- Bot token
- Safe defaults
- Sending only. Text goes out as written, with no formatting and no link previews.
DiscordPost to and read a channel with a bot. Posts never ping anyone.
- Reads
- Read recent messages
- Changes
- Post a message
- Credentials and settings
- Bot token
- Safe defaults
- Posts never ping anyone.
TwTwilio SMSSend text messages and read recent ones.
- Reads
- Read recent texts
- Changes
- Send a text
- Credentials and settings
- Account SID; Auth token; Send from; Only send to these prefixes (optional)
- Safe defaults
- Set Only send to these prefixes, so an agent cannot text numbers elsewhere. It is empty by default, which allows any number.
Files
S3Amazon S3List, read and save text files in an S3 bucket, or a compatible store.
- Reads
- List files, Read a text file
- Changes
- Save a text file
- Credentials and settings
- Region; Bucket; Access key ID; Secret access key; Custom endpoint (optional)
- Safe defaults
- Text files only. Use keys limited to one bucket. A custom endpoint supports compatible stores. It must be a public address, unless the operator allowed the host.
OnOneDriveList, read and save text files in OneDrive.
- Reads
- List a folder, Read a text file
- Changes
- Save a text file
- Credentials and settings
- Client ID; Client secret; Refresh token; Tenant (optional)
- Safe defaults
- Text files only. Limit the app's permissions in Azure.
Google DriveFind, read and upload files in Google Drive, including shared drives.
- Reads
- Find files, Read a text file
- Changes
- Upload a file
- Credentials and settings
- Service account key (JSON) (optional); Client ID (optional); Client secret (optional); Refresh token (optional)
- Safe defaults
- Text reading only, though uploads can be other file types. With a service account, share only the files or folders it needs.
Productivity
Google SheetsRead a range, add rows and update cells. Values are stored as written, so text from outside can never become a formula.
- Reads
- List the sheets in a spreadsheet, Read a range
- Changes
- Add rows, Overwrite a range
- Credentials and settings
- Service account key (JSON) (optional); Client ID (optional); Client secret (optional); Refresh token (optional)
- Safe defaults
- Values are stored exactly as written, so text from outside can never become a formula.
NotionSearch, read pages and databases, create pages and add text. Share each page with the integration first.
- Reads
- Search, Read a page, Query a database
- Changes
- Create a page, Add text to a page
- Credentials and settings
- Internal integration token
- Safe defaults
- It only sees pages you share with the integration.
AirtableList, read, add and update records with a personal access token.
- Reads
- List records, Read a record
- Changes
- Add records, Update records
- Credentials and settings
- Personal access token
- Safe defaults
- Placeholders are refused in formulas, so outside text cannot change a query. Limit the token to the bases it needs.
M3Microsoft 365Read and send Outlook mail, and read and save SharePoint files, through Microsoft Graph.
- Reads
- List mail, Read a message, Find SharePoint sites, List SharePoint files, Read a SharePoint text file
- Changes
- Send an email, Save a SharePoint text file
- Credentials and settings
- Application (client) ID; Client secret; Tenant ID (optional); Refresh token (optional); Mailbox address (optional); Only send to these domains (optional)
- Safe defaults
- Set Only send to these domains, so a manipulated agent cannot mail data elsewhere. It is empty by default. Only an admin can use the mail reading actions. Text files only for SharePoint. It cannot be used for email triggers, which need IMAP. Limit the app's permissions in Azure.
Customers
HubSpotFind, read, create and update contacts, companies, deals and tickets with a private app token.
- Reads
- Search records, Read a record
- Changes
- Create a record, Update a record
- Credentials and settings
- Private app access token
- Safe defaults
- Limit the private app's scopes to what you need.
SfSalesforceQuery, read, create and update records through a connected app using the client credentials flow.
- Reads
- Find records by a field, Run a SOQL query, Read a record
- Changes
- Create a record, Update a record
- Credentials and settings
- My Domain address; Consumer key; Consumer secret
- Safe defaults
- Only SELECT queries are allowed in SOQL, and placeholders are refused there. The address must be your own My Domain address.
ZendeskSearch and read tickets, open new ones and add comments. Comments are internal notes unless made public.
- Reads
- Search tickets, Read a ticket
- Changes
- Open a ticket, Comment on a ticket
- Credentials and settings
- Subdomain; Agent email; API token
- Safe defaults
- Comments are internal notes unless you make them public.
Developer tools
JiraSearch and read issues, create them, comment and move them on. Jira Cloud only.
- Reads
- Search with JQL, Read an issue, List status changes
- Changes
- Create an issue, Add a comment, Change status
- Credentials and settings
- Site name; Account email; API token
- Safe defaults
- Jira Cloud only. Placeholders are refused in JQL, so outside text cannot change a search.
GitHubRead issues, pull requests and files, open issues and add comments. github.com only.
- Reads
- List issues, Read an issue, List pull requests, Read a file
- Changes
- Open an issue, Comment on an issue or pull request
- Credentials and settings
- Fine-grained access token
- Safe defaults
- github.com only. Use a fine-grained token limited to the repositories it needs.
GitLabRead issues, merge requests and files, open issues and add notes. Works with gitlab.com or your own server.
- Reads
- List issues, List merge requests, Read a file
- Changes
- Open an issue, Comment on an issue
- Credentials and settings
- Access token; Server address (optional)
- Safe defaults
- Works with gitlab.com or your own server. A private server needs the operator to allow the host, so it cannot be used in hosted mode.
LinearList teams and issues, create issues and add comments with a personal API key.
- Reads
- List teams, List recent issues
- Changes
- Create an issue, Add a comment
- Credentials and settings
- Personal API key
- Safe defaults
- The key acts as the person who created it, so use one with care.
Commerce
ShopifyRead orders and products, and tag orders, with a custom app's Admin API token.
- Reads
- List orders, Read an order, List products
- Changes
- Tag an order
- Credentials and settings
- Shop name; Admin API access token
- Safe defaults
- The only change it can make is tagging an order. Limit the custom app's scopes.
StripeRead customers, charges, invoices and the balance. Read-only.
- Reads
- Read the balance, List customers, Read a customer, List charges, List invoices
- Credentials and settings
- Restricted API key
- Safe defaults
- Read-only. It accepts only restricted keys, which start with
rk_. Create one with read access only. This is separate from Hivelock's own billing.
Checked against the code on 6 November 2026.
Product names and logos belong to their owners and are shown only to identify each service. Their use does not imply endorsement. Some icons are from Simple Icons, under CC0.