OAuth Aggregation
One unified API for every OAuth flow — authorization code, refresh tokens, PKCE, and client credentials. We handle the dance; you ship.
AppConnectHQ unifies OAuth flows, credential storage, and the Model Context Protocol behind a single, secure API. Ship integrations in hours, not quarters.
Four tightly‑integrated services that replace the dozen homegrown systems most teams cobble together.
One unified API for every OAuth flow — authorization code, refresh tokens, PKCE, and client credentials. We handle the dance; you ship.
Encrypted, scoped credential storage with AES‑256‑GCM, key rotation, and per‑tenant isolation. Every token is audit‑logged.
Expose any integration as a Model Context Protocol server. Give your AI agents typed tools with built‑in policy enforcement.
Granular scopes, RBAC, IP allowlists, and immutable audit logs. Compliance reports auto‑generated for SOC 2, ISO 27001, HIPAA.
The same SDK works for every provider. Switch from Slack to Notion to your custom OAuth app by changing one string. Token refresh, error handling, and retry are all built in.
POST /api/mcp/unified exposes every tool a user has connected as a single Streamable HTTP JSON‑RPC endpoint — point any MCP client at it and get typed tools for every service that user is authorized on.
{
"mcpServers": {
"appconnect": {
"type": "http",
"url": "https://appconnecthq.vercel.app/api/mcp/unified",
"headers": {
"Authorization": "Bearer <YOUR_ACCESS_TOKEN>"
}
}
}
}The TypeScript and Python SDKs share one shape: list a user’s tools, adapt them for your framework, execute whatever the model calls. Adapters ship for OpenAI, Anthropic, the Vercel AI SDK, and LangChain in TypeScript — OpenAI, Anthropic, and LangChain in Python.
import {
AppConnectClient,
toOpenAITools,
executeOpenAIToolCall,
} from "appconnect";
const tools = await toOpenAITools({ client, accessToken });
const reply = await openai.chat.completions.create({
model: "gpt-4o-mini",
messages,
tools,
});
for (const call of reply.choices[0].message.tool_calls ?? []) {
messages.push(
await executeOpenAIToolCall({ client, accessToken }, call),
);
}from appconnect import AppConnectClient
from appconnect.framework.openai import (
to_openai_tools,
execute_openai_tool_call,
)
tools = await to_openai_tools(client, access_token)
reply = openai_client.chat.completions.create(
model="gpt-4o-mini", messages=messages, tools=tools,
)
for call in reply.choices[0].message.tool_calls or []:
messages.append(
await execute_openai_tool_call(client, access_token, call)
)Subscribe your agents to what happens next — GitHub commits, Shopify orders, Google Calendar changes — delivered as signed webhooks with automatic retries.
Subscribe to push, issue, and pull‑request events on any repo a connected user grants access to. AppConnect registers the GitHub webhook for you and verifies every payload's HMAC signature before delivery.
Order and product events land the moment they happen — HMAC‑verified against the store's OAuth app secret, with big‑integer‑safe parsing for Shopify's numeric order and product ids.
For providers with no native webhook, a scheduled poller diffs calendar state every five minutes and classifies created, updated, and cancelled events with cursor‑based idempotency.
Every event is queued and retried with backoff on failure, with an atomic claim so the same delivery is never dispatched twice. Manage subscriptions and inspect delivery history from the SDK or the admin dashboard.
Embed the AppConnectHQ SDK and point it at any of our supported providers. Your users authenticate through the provider's real OAuth screen — we never see their password.
Tokens are encrypted at rest with AES‑256‑GCM and bound to a scoped tenant key. Refresh tokens rotate automatically. Every access is audit logged.
Use the typed SDK or expose the connection as an MCP server. Make API calls; we handle refresh, retry, rate limits, and policy enforcement on every request.
Expose any integration as a typed MCP tool. Your agent gets the capability; your users keep the audit trail.
AI AgentsAdd native Slack, GitHub, or Notion to your product without spinning up a credential service of your own.
SaaS ProductsA single dashboard for every credential your team uses. No more secrets in shared 1Password vaults.
Internal ToolsEvery token encrypted at rest. Every API call signed. Every action audit logged. Built from day one for the security & compliance reviews that gate enterprise deals.
Request our SOC 2 reportStart in a sandbox, ship to production, scale to ten million connections. No commitments. No credit card required.