One governed path.
Every connector.
Connector calls run server-side through a governed invocation framework — idempotency keys, retries, SSRF-guarded egress, and capability gates. Slack is the reference connector today; a broader catalog is planned on the same framework.
Connectors are governed calls.
Not pasted API keys.
Every connector invocation goes through the same server-side path. Nothing is called from the browser, and no credential ever reaches user code.
Invocations run through a queued worker with idempotency keys and retries — duplicate sends are structurally prevented.
Outbound calls pass SSRF-guarded egress validation. Connectors reach what they declare, nothing else.
Apps must hold an explicit capability to invoke a connector. No capability, no call — enforced at publish and at runtime.
A small governed set.
Not a marketplace.
PostgreSQL and Slack are live today. Database, API, and custom-source connectors are planned on the same governed framework — quality over count.
Dedicated per-org database with server-side SQL execution.
Reference connector — governed messages with idempotent delivery.
External database connector on the governed framework.
Document store connector on the governed framework.
Generic HTTP connector with declared egress targets.
Typed API connector with capability-scoped queries.
Stop pasting API keys.
Start governing calls.
Connector credentials stay server-side. Invocations are queued, idempotent, and audited. Built for teams that treat third-party calls as production traffic.
Open beta · Slack connector live · Catalog planned
Server-side execution · Secret references · Capability gates · Audited invocations