v2.0 · MCP gateway is liveUnified Integration Platform

Connect your app to everything, through one gateway.

AppConnectHQ unifies OAuth flows, credential storage, and the Model Context Protocol behind a single, secure API. Ship integrations in hours, not quarters.

SOC 2 Type II AES‑256‑GCM 99.99% uptime
948 native integrations, live from the platform catalog
1Password
1Password Events API
2Chat
7shifts
A-Leads
Ably
Ably Control
Abstract
AbuseIPDB
Abyssale
Accredible Certificates
AccuLynx
AccuWeather
ActiveCampaign
ActiveTrail
Adafruit IO
Addressfinder
AddressZen
Adobe Commerce
Adyen
Adyntel
AeroLeads
Affinda
Affinity
AfterShip
AgentMail
AgentQL
Agenty
Agiled
Agility CMS
Agora
Ahrefs
Aimfox
Airbrake
Aircall
Airtable
AiVOOV
Alchemy
AlgoDocs
Algolia
Alpha Vantage
AltText.ai
AMap
Amara
Ambee
Ambient Weather
Amplemarket
Amplitude
Anchor Browser
Anrok
Anthropic
Anthropic Admin
apaleo
API Ninjas
API-SPORTS
API.Bible
API2PDF
ApiFlash
Apify
APIpie AI
APIVerve
APIVoid
Apollo
Appstle Subscriptions
AppVeyor
arXiv
Asana
Ashby
ASIN Data API
AssemblyAI
Atlas.so
Attention
Attio
Auth0 Management
Autom
Autotask
Aviationstack
Avoma
AWS Account
Axiom
Ayrshare
Baidu Maps
Baidu Qianfan
BALLDONTLIE World Cup
BambooHR
Bannerbear
Baremetrics
Baserow
Basin
Beamer
Beehiiv
Beeminder
Benzinga
Best Buy
Better Proposals
Better Stack
BetterContact
BidSketch
BigCommerce
BigDataCloud
BigMailer
BigPicture.io
Bird
Bitly
Bitrise
Bland AI
Blocknative
Bluesky
Bolna
BoloForms
Bookingmood
Booqable
Botpress
BotStar
Bouncer
BoxHero
Brandfetch
Brave Search
Braze
Breathe
Breeze
Brevo
Brex
Bright Data
Browse AI
Browserbase
Browserless
BTCPay Server
BugHerd
Bugsnag
Builder.io
Buildium
Buildkite
BuiltWith
Businessmap
Buttondown
ByteForms
Cal.com
Calendarific
Calendly
CallerAPI
Callingly
CallPage
CallRail
Campaign Cleaner
Canva
Capsule CRM
Carbone
Cardly
CATS
Celigo
Census Bureau
Censys
CentralStationCRM
Cert Spotter
Certifier
Certn
Chargebee
ChartMogul
ChaserHQ
Chatarmin
ChatBotKit
ChatPDF
Chattermill
Chatwork
Check
Checkly
Chorus
Cin7 Core
Circle
CircleCI
Claid AI
Clari Copilot
ClassMarker
Clearout
Clerk
ClickMeeting
ClickSend
ClickUp
Clockify
Close
CloudConvert
Cloudflare Browser Run
Cloudflare DNS
Cloudflare R2
Cloudflare Worker
Cloudinary
cloudlayer.io
Cockroach Labs
Coda
Codacy
Codegen
Codemagic
CodeRabbit
Cohere
CoinMarketCal
CoinMarketCap
Coinranking
CollegeFootballData
CompanyCam
CompanyEnrich
Conductor
ConfigCat
Confluence
Contentful
Contentstack Content Delivery
Contentstack Content Management
Context7
Control D
ConvertAPI
Convex
Courier
CraftMyPDF
Crisp
Cronitor
Crowdin
Crunchbase
Crustdata
currencyapi
CurrencyBeacon
Currents API
Cursor
Customer.io
CustomGPT.ai
Cuttly
Cyberimpact
DaData.ru
Daffy
Dailybot
Dart
Data247
Databar.ai
Databox
Databricks
Datadog
DataScope
Deck.co
Deepgram
DeepL
DeepSeek
Delighted
Demodesk
DeskTime
Detect Language
Dev.to
Devin
Dialpad WFM
Dida365
Diffbot
DigitalOcean
DiscoLike
Discord
Discourse
Dixa
DNSFilter
Docmosis
Docparser
DocsAutomator
DocsBot AI
Docsend2pdf
Docsumo
DocuGenerate
Documenso
Document360
DocuSeal
Doppler
Dovetail
Drata
Dropbox
Dropbox Sign
Dropcontact
Dub
Dune
Dynatrace
E2B
Eagle Doc
EasyPost
Ecologi
Elasticsearch
ElevenLabs
Elevio
Elorus
Emailable
EmailOctopus
Encharge
Energy Performance Certificates
Envoy
EODHD APIs
ERPNext
eSignatures.com
EspoCRM
Evenium
Eventee
Eventzilla
Everhour
Exa
ExpoFP
Fairing
fal.ai
Faraday
Fathom Analytics
Feathery
Featurebase
Feishu
Feishu App Bot
Fellow
Felt
Fern
FFHub
Fiber AI
Fidel API
Figma
Files.com
Fillout
Finage
Financial Modeling Prep
Findymail
Firecrawl
FireHydrant
Firstbase
Fivetran
Fixer
Flagsmith
Float
FlowiseAI
Fluxguard
Fly.io
folk
Fomo
football-data.org
Forem
Formbricks
Formcarry
Formsite
Formspree
Foursquare
Foxit Cloud API
Freshdesk
Freshsales
Freshservice
Freshteam
Front
FullEnrich
Gamma
Geckoboard
Gem
Gemini
Gender-API.com
GenderAPI.io
Geoapify
Geocodio
Getform
Getnote
GetProspect
Ghost
Gift Up
Gigasheet
GIPHY
Gist
Gitea
Gitee
GitHub (OAuth)
GitHub (Token)
GitLab
Gladia
Gleap
Globalping
Glyphic
Gmail
GoDial
Gong
Goody
Google Analytics
Google BigQuery
Google Calendar
Google Docs
Google Drive
Google Forms
Google Photos
Google Search Console
Google Sheets
Google Slides
Google Tasks
Gorgias
GoSquared
Grafana
Grafana Cloud
Granola
GraphHopper
Greenhouse
Griptape
Grist
GroqCloud
GTmetrix
Gumloop
Gumroad
Guru
Habitica
Hacker News
HackerRank Work
Harmonic.ai
Harvest
HasData
Have I Been Pwned
Headout
Healthchecks.io
HelloLeads
Help Scout Docs
HERE
Hex
HeyGen
HeyReach
Heyy
Heyzine
Higgsfield AI
HigherGov
HighLevel
Holded
Home Assistant
Honeybadger
Honeycomb
Hookdeck
Hoop
HotspotSystem
HTML to Image
HTML/CSS to Image
HubSpot
Hugging Face
Humanitix
Hunter
Hyperbrowser
Icypeas
ima
ImageKit
ImgBB
Imgix
incident.io
InfluxDB Cloud
Instantly.ai
Instatus
Intelliprint
Intercom
IP2Location.io
IP2WHOIS
IPGeolocation.io
IPinfo
IPLocate
IQAir AirVisual
Iru (Kandji)
IT Glue
Jam
Jamie
JazzHR
Jiminny
Jira
JobNimbus
Jotform
JSONBin.io
JumpCloud
Juniper Mist
Kaggle
Kaleido
Keen IO
Keeper SCIM
Kernel
Keygen
Keyword.com
Kickbox
KIE.AI
Kintone
Kit
Klaviyo
Klazify
KlickTipp
Klipfolio
Knack
Knock
KnowBe4
Kommo
Kontent.ai
Kraken.io
Kustomer
L2S
La Growth Machine
Label Studio
Landbot
Langbase
LangSmith
Laposta
Laravel Cloud
Lattice
LaunchDarkly
Leadfeeder
Leexi
Lemon Squeezy
Lessonspace
Lever
lexoffice
LIFX
Lightfield
Linear
Lingvanex Translation API
LinkedIn
Linkhut
Linkly
Linkup
Linux DO
Listen Notes
LiveSession
Lob
Lodgify
LogSnag
Lokalise
Loomio
Loop Returns
Loops
Loyverse
Lucid SCIM
Luma
Lumos
Magnific (Freepik)
MailBluster
Mailboxlayer
MailboxValidator
Mailchimp
Mailercloud
MailerLite
MailerSend
Mailgun
Mailjet
Mails
Mailtrap
MaintainX
Make
Manatal
Manus
Mapbox
Marketstack
Massive (Polygon.io)
Mattermost
Measure
Mediastack
MeetGeek
Mem0
Memberstack
Merriam-Webster Collegiate
Meta
Metabase
Metaso
MetatextAI
Metronome
Mezmo
Microsoft Clarity
Mindbody
MinerU
MiniMax
Missive
Mistral AI
Mixpanel
Mocean
MOCO
Modjo AI
Moesif
Momentum.io
MongoDB Atlas Administration
MoonClerk
Moorcheh
Moosend
Mopinion
MotherDuck
Motion
MSG91
n8n
Namely
Nango
NASA
Nasdaq Data Link
Needle
NetHunt
Netlify
Neutrino API
NeverBounce
News API
NewsData.io
ngrok
NinjaPear
Ninox
NocoDB
noCRM.io
Northbeam
Northflank
Notion
Novu
ntfy
Nylas
Nyne.ai
OCR.space
Octave
Okta
Omnisend
OnceHub
OneDesk
OneDrive
OnePageCRM
OneSignal
Ongage
OpenAI
OpenAlex
OpenCage
OpenFootball World Cup
OpenHands
OpenPageRank
OpenRouter
OpenSea
Opsgenie
OptimoRoute
Ordinal
Ortto
OSS Insight
Otter.ai
Outline
Outlook
Owl Protocol
Paddle
PagerDuty
PandaDoc
Paperform
Paradym
Parallel
ParseHub
Parsera
Parseur
PartnerStack
PartnerStack Partner
Payhip
Paymo
Paystack
PDF-API.io
PDF.co
Pdfless
PDFMonkey
Pendo
People Data Labs
Perigon
Permit.io
Perplexity
Persona
Pexels
PhantomBuster
Pilvio
Pinata
Pinecone
Pingdom
Pipedream
Pipedrive
Placekey
Placid
Plate Recognizer
Plausible Analytics
Plisio
Plunk
Podscribe
Polar
Positionstack
PostGrid
PostGrid Verify
PostHog
Postmark
Precoro
Process Street
Productboard
Productive
ProjectManager
Prospeo
ProxiedMail
PRTG Classic
Push by Techulus
Pushbullet
Pushover
Pylon
Qlty
Quaderno
Quentn
Quipteams
Quo (OpenPhone)
Radar
Ragie
Raisely
RAWG
Raygun
Razorpay
ReadMe
Readwise
RealPhoneValidation
Recall.ai
Recurly
Refiner
remove.bg
Render
RenderForm
RepairShopr
Replicate
Reply.io
Resend
Retell AI
Retently
RevenueCat
Rippling
Riveter
Roam SCIM
Roboflow
Rocket.Chat
Rocketlane
RocketReach
Rollbar
Rootly
Route4Me
Runpod
SaaS Custom Domains
SafetyCulture
Salesflare
Salesmate
SatisMeter
Scopus
ScrapeGraphAI
Scrapfly
ScrapingBee
Scrapingdog
screenshot.fyi
ScreenshotOne
SearchApi
Segment
Semantic Scholar
Sendbird
Sender
SendFox
SendGrid
Sendmator
Sendspark
Sensibo
Sentry
Seqera
SerpApi
Serpdog
SERPHouse
Serply
sevdesk
SheetDB
ShipBob
ShipEngine
Shippo
ShipStation
Shodan
Shopify Store
Short Menu
Short.io
Shortcut
Shorten.REST
Shotstack
Signalbase
SignPath
SignWell
Similarweb
Simla.com
Simple Analytics
Simplesat
SiteSpeakAI
Skyfire
Slack
Sling
Slite
Smartlead
SmartRecruiters
Smartsheet
SMS Alert
SMTP2GO
SmugMug
Snipe-IT
Solcast
Speechmatics
Spider Cloud
Spotify
Square
Stability AI
StackAI
Stannp
Starton
Statamic
Statista
Statsig
StatusCake
Statuspage
StatusPal
Stay AI
Store Leads
StoreCensus
Stormboard
Stormglass
Storyblok
Strava
Streak
Streamtime
Stripe
Subvisory
SunoAPI
Supabase
Supadata
Superchat
SuperSaaS
SupportBee
SureContact
Svix
SwaggerHub
Systeme.io
Taggun
TalentHR
TalentLMS
Tally
Tapfiliate
Táve
Tavily
TaxJar
Teamcamp
Teamtailor
Telegram
Telnyx
TelTel
Templated
Tencent Docs
Tencent Maps
Terraform
TextCortex
TextIt
TextRazor
The Cat API
The Colony
The Dog API
The Odds API
TheirStack
Ticketmaster
TickTick
TikHub
TikTok Business
TimeCamp
timelink
Tinybird
TinyURL
Todoist
Together AI
Toggl Track
Tomba
TomTom
Torii
TPSCheck
Trello
Tremendous
Trent
Trigger.dev
Tripadvisor
Triple Whale
Truvera
Turbot Pipes
Turso
Twelve Data
Twenty CRM
Twilio
TwitterAPI.io
Typeform
Typefully
U301
Umami
UniOne
Unipile
Uniswap API
Unsplash
updown.io
Uploadcare
urlscan.io
Userflow
Userlist
V2EX
Valyu
Vapi
VATlayer
VectorShift
Vercel
VerifiedEmail
Veriphone
Vestaboard
Viggle
Vimeo
VirusTotal
Vitally
Voiceflow
VTEX
Wachete
WakaTime
Wappalyzer
Waterfall
WeatherAPI
Weatherbit
Weaviate
Web of Science
Web of Science Expanded
Webflow
WebScraper.io
WebScraping.AI
Webshare
Webvizio
what3words
WhatsApp Business
WhoisFreaks
Whop
Winston AI
Wise
Wit.ai
Wiza
Woodpecker.co
WordPress
Workable
Workday
Workiom
WorkOS
Workpath
Worksnaps
World News API
Wrike
Writer
X.com (Twitter)
xAI
Xata
Yelp
YNAB
You.com
YouTube
Yuan Dian
Zendesk
ZenRows
Zenserp
Zeplin
ZeroBounce
Zhihu
Zigpoll
Zipcodebase
Zixflow
Zoom
Zorus
Zyte API
Platform

One platform.
Every integration primitive.

Four tightly‑integrated services that replace the dozen homegrown systems most teams cobble together.

OAuth Aggregation

One unified API for every OAuth flow — authorization code, refresh tokens, PKCE, and client credentials. We handle the dance; you ship.

40+ providers · auto‑refresh

Credential Vault

Encrypted, scoped credential storage with AES‑256‑GCM, key rotation, and per‑tenant isolation. Every token is audit‑logged.

AES‑256‑GCM · SOC 2

MCP Server Gateway

Expose any integration as a Model Context Protocol server. Give your AI agents typed tools with built‑in policy enforcement.

JSON‑RPC · streaming

Enterprise Security

Granular scopes, RBAC, IP allowlists, and immutable audit logs. Compliance reports auto‑generated for SOC 2, ISO 27001, HIPAA.

SOC 2 · ISO 27001 · HIPAA
Developer experience

Three lines.
One hundred integrations.

The same SDK works for every provider. Switch from Slack to Notion to your custom OAuth app by changing one string. Token refresh, error handling, and retry are all built in.

Strongly‑typed clientsGenerated from each provider's OpenAPI spec.
Automatic token refreshWe rotate refresh tokens before they expire.
Built‑in retry & backoffIdempotent retries on 429s and 5xxs.
Read the full quickstart
1
200 OK · 142ms
{ id: "cred_9k2a", provider: "github", status: "active", scopes: [...] }
MCP server

One MCP endpoint.
Every connected tool.

POST /api/mcp/unified exposes every tool a user has connected as a single Streamable HTTP JSON‑RPC endpoint — point any MCP client at it and get typed tools for every service that user is authorized on.

Claude Code & CursorDrop a static bearer token into your MCP client config — no OAuth dance required for local dev tools.
Claude.ai & ChatGPT connectorsA full OAuth 2.1 authorization server — PKCE, dynamic client registration, consent, and token revocation — for hosted connector flows.
Spec‑compliant transportStreamable HTTP with MCP protocol‑version negotiation (2025‑06‑18, 2025‑03‑26, 2024‑11‑05) and session‑scoped Mcp‑Session‑Id.
Read the MCP connect guide
.mcp.json
{
  "mcpServers": {
    "appconnect": {
      "type": "http",
      "url": "https://appconnecthq.vercel.app/api/mcp/unified",
      "headers": {
        "Authorization": "Bearer <YOUR_ACCESS_TOKEN>"
      }
    }
  }
}
Method 1 · static bearer token
Works today for Claude Code, Cursor, and any config‑based MCP client.
SDKs

Typed clients,
plus adapters for the frameworks you already use.

The TypeScript and Python SDKs share one shape: list a user’s tools, adapt them for your framework, execute whatever the model calls. Adapters ship for OpenAI, Anthropic, the Vercel AI SDK, and LangChain in TypeScript — OpenAI, Anthropic, and LangChain in Python.

TypeScript
import {
  AppConnectClient,
  toOpenAITools,
  executeOpenAIToolCall,
} from "appconnect";

const tools = await toOpenAITools({ client, accessToken });
const reply = await openai.chat.completions.create({
  model: "gpt-4o-mini",
  messages,
  tools,
});

for (const call of reply.choices[0].message.tool_calls ?? []) {
  messages.push(
    await executeOpenAIToolCall({ client, accessToken }, call),
  );
}
Python
from appconnect import AppConnectClient
from appconnect.framework.openai import (
    to_openai_tools,
    execute_openai_tool_call,
)

tools = await to_openai_tools(client, access_token)
reply = openai_client.chat.completions.create(
    model="gpt-4o-mini", messages=messages, tools=tools,
)

for call in reply.choices[0].message.tool_calls or []:
    messages.append(
        await execute_openai_tool_call(client, access_token, call)
    )
Browse the API referenceBrowse the per‑service tools reference
Triggers

Real‑time events,
not just request/response.

Subscribe your agents to what happens next — GitHub commits, Shopify orders, Google Calendar changes — delivered as signed webhooks with automatic retries.

GitHub webhooks

Subscribe to push, issue, and pull‑request events on any repo a connected user grants access to. AppConnect registers the GitHub webhook for you and verifies every payload's HMAC signature before delivery.

new_commit · new_issue · new_pull_request

Shopify webhooks

Order and product events land the moment they happen — HMAC‑verified against the store's OAuth app secret, with big‑integer‑safe parsing for Shopify's numeric order and product ids.

order_created · order_updated · product_created

Google Calendar polling

For providers with no native webhook, a scheduled poller diffs calendar state every five minutes and classifies created, updated, and cancelled events with cursor‑based idempotency.

5‑minute interval · cursor tracking

Reliable delivery pipeline

Every event is queued and retried with backoff on failure, with an atomic claim so the same delivery is never dispatched twice. Manage subscriptions and inspect delivery history from the SDK or the admin dashboard.

atomic claim · retry + backoff · SDK‑managed
How it works

From handshake to API call,
in three steps.

01

Connect

Embed the AppConnectHQ SDK and point it at any of our supported providers. Your users authenticate through the provider's real OAuth screen — we never see their password.

02

Store

Tokens are encrypted at rest with AES‑256‑GCM and bound to a scoped tenant key. Refresh tokens rotate automatically. Every access is audit logged.

03

Call

Use the typed SDK or expose the connection as an MCP server. Make API calls; we handle refresh, retry, rate limits, and policy enforcement on every request.

Use cases

Built for the way teams
build software now.

See all use cases
AIgithub.readslack.sendnotion.writestripe.charge

Give agents safe, audited access to user data.

Expose any integration as a typed MCP tool. Your agent gets the capability; your users keep the audit trail.

AI Agents
your-saas.com/integrationsGSNLH

Ship integration features in days, not quarters.

Add native Slack, GitHub, or Notion to your product without spinning up a credential service of your own.

SaaS Products
connectedconnectedconnectedconnectedconnectedconnected

Build automations without managing 50 OAuth apps.

A single dashboard for every credential your team uses. No more secrets in shared 1Password vaults.

Internal Tools
Pricing

Simple, usage‑based.
Free to start.

Compare plans in detail
Hobby
$0/month

For weekend projects and learning.

  • Up to 100 connections
  • 20+ providers
  • Community support
  • Local dev only
Start free
Enterprise
Custom

For teams that need SLAs and SSO.

  • Unlimited connections
  • Dedicated tenant
  • SOC 2 reports
  • Audit log export
  • 99.99% SLA + dedicated CSM
Contact sales
Security & Compliance

Trust isn’t a feature.
It’s the foundation.

Every token encrypted at rest. Every API call signed. Every action audit logged. Built from day one for the security & compliance reviews that gate enterprise deals.

Request our SOC 2 report
EncryptionAES‑256‑GCM
ComplianceSOC 2 · ISO 27001
AuthOAuth 2.1 · PKCE
IsolationPer‑tenant KMS
AuditingImmutable logs
Uptime SLA99.99% guaranteed
Customers

Trusted by teams building
the future of software.

“We replaced six weeks of OAuth plumbing with a Friday afternoon. By Monday our AI agent was reading from Notion, writing to Linear, and posting to Slack — all with proper audit logs.”
M
Maya Okafor
Staff Engineer, Pathway AI
“The MCP gateway alone justified the cost. Our agent tooling went from prototype to production in two sprints.”
J
Jordan Reyes
CTO, Quanta Labs
“Their compliance posture is what closed the deal for us. Audit logs and SOC 2 reports out of the box.”
P
Priya Shah
VP Engineering, Northwind Bank
Frequently asked

Questions, answered.

What is MCP, and why should I care?
The Model Context Protocol is an open standard for exposing tools and data to AI agents. We let you turn any integration in our catalog into a typed, policy‑enforced MCP server with one config change — so your agents can read, write, and act safely.
How is this different from rolling my own OAuth?
Speed and safety. Rolling your own gets you to "it works on my machine" fast — production-grade refresh, multi‑tenant isolation, scope enforcement, audit logs, and 100+ provider quirks take quarters. We give you that on day one.
Where are credentials stored, and who can access them?
Encrypted at rest with AES‑256‑GCM, scoped to a per‑tenant key. Tokens never leave our hardened vault except through your authenticated API calls. We can't read them; only you can.
Which providers do you support?
We support 100+ providers out of the box — including GitHub, Slack, Notion, Linear, Stripe, Salesforce, HubSpot, Google Workspace, and most major SaaS APIs. Custom OAuth apps take about fifteen minutes to add.
Do you offer self‑hosted or VPC deployment?
Yes, on our Enterprise plan. We provide a fully containerized deployment with your KMS, your VPC, and your audit log destinations. Talk to sales.
How do you handle rate limits and retries?
Built in. Every SDK client wraps the underlying API with idempotent retry, exponential backoff with jitter, and per‑provider rate‑limit tracking. You write the happy path; we handle the edge cases.
Ready when you are

Connect everything.
In an afternoon.

Start in a sandbox, ship to production, scale to ten million connections. No commitments. No credit card required.