Skip to main content

Connections

Connections link your external service accounts to AgentHiFive so that AI agents can access them through the vault. Each connection stores encrypted credentials and is scoped to your workspace.

Connection Types

TypeAuth MethodHow It Works
OAuthBrowser-based consentYou click "Connect", authorize in the provider's login page, and tokens are stored automatically.
Bot TokenPaste a tokenYou create a bot in the provider's platform, copy the token, and paste it in the dashboard.
API KeyPaste a key or tokenYou get a key from the provider's console and paste it in the dashboard.

Supported Providers

Data & Productivity (OAuth)

ServiceProviderWhat Agents Can Do
GmailGoogleRead, search, and send emails
Google CalendarGoogleRead and create calendar events
Google DriveGoogleRead, search, and manage files
Google SheetsGoogleRead and edit spreadsheets
Google DocsGoogleRead and edit documents
Outlook MailMicrosoftRead and send emails
Outlook CalendarMicrosoftRead and create calendar events
Outlook ContactsMicrosoftRead and manage contacts
OneDriveMicrosoftRead, upload, and manage files
Microsoft TeamsMicrosoftRead and send chat/channel messages
NotionNotionRead, search, and manage pages, databases, and blocks

Project Management (API Key)

ServiceProviderWhat Agents Can Do
TrelloTrelloRead boards/lists/cards, create and move cards
JiraJira CloudRead and create issues, manage sprints and projects

Communication (Bot Token)

ServiceProviderWhat Agents Can Do
Telegram BotTelegramSend and receive messages via a bot
Slack BotSlackRead channels, send messages, upload files

LLM Access (API Key)

ServiceProviderWhat Agents Can Do
Anthropic (Claude)AnthropicSend messages to Claude models
OpenAIOpenAISend completions to GPT models
Google GeminiGoogleSend completions to Gemini models
OpenRouterOpenRouterMulti-model LLM gateway (OpenAI-compatible)

How Connections Work

  1. You create a connection in the dashboard (Connections page or when approving an agent's permission request).
  2. Credentials are encrypted with AES-256-GCM and stored in the database. They are never exposed to agents or shown in the UI after creation.
  3. You create a policy that binds an agent to the connection with specific rules (rate limits, allowlists, time windows).
  4. The agent makes API calls through the vault. The vault injects credentials, enforces policies, and logs an audit trail.
Singleton Connections

Some services (Telegram, Slack, Anthropic, OpenAI, Gemini, OpenRouter) are singletons -- only one connection per workspace. Agents refer to them by service name (e.g., service: "telegram") instead of connection ID.

Next Steps

  • Pick a provider from the list above to see setup instructions
  • Create a policy to bind an agent to a connection
  • Test execution through the vault