Skip to docs content
Browse documentation
On this page

Connect a provider

Connect GitHub, Google, Slack, Notion and other providers to Minion once, then use them from every agent without exposing the token.

Connect a provider once and every agent you use can call its API through Minion. The token stays in Minion: your agents and packages get the results of their calls, never the credential.

Pick a provider

  • GitHub : repositories, issues, pull requests and CI, through the built-in GitHub preset or a fine-grained token.
  • Google : Calendar, Gmail and Drive, through the built-in Google preset.
  • Slack : post and read messages with a bot token, and receive events through a webhook.
  • Discord : post to channels and read messages with a bot token.
  • Notion : read and write pages and databases with an internal connection token or OAuth.
  • Figma : files, comments and components, through a personal access token or your own OAuth app.
  • Salesforce : SOQL queries and records through a custom OAuth app.
  • Spotify : listening history, playback and library through a custom OAuth app.
  • Origin : Cursor's Origin API, by signing app JWTs with a stored key and minting short-lived tokens.

Two ways to connect

  • OAuth integration. You register an OAuth app with the provider, add it under Integrations in the Minion app, and approve the connection once. Minion stores the token, refreshes it where the provider allows, and attaches it only to the provider's API hosts. GitHub and Google have built-in presets. For any other OAuth 2 provider you enter its authorize URL, token URL and API hosts yourself.
  • Token stored as a secret. You save an API key or personal access token under Secrets, approve the hosts it may be sent to, and reference it as {{secret:name}} in a fetch. This is usually quicker for one automation that needs a narrow, read-only token.

Only owners and admins of your Minion organization can add OAuth apps, connect integrations or save secrets. Members can use them.

Provider not listed?

Any provider with an OAuth 2 flow or an API key works. See OAuth integrations for the custom provider form and Secrets for API keys.