oomol-lab/open-connector
Open-source auth gateway connecting 1500+ SaaS providers to AI agents through SDK, CLI, MCP, HTTP, and OpenAPI.
OpenConnector – A Gateway for AI Agents to Use External Services
What it is | OpenConnector is an open‑source “connector gateway” that lets AI agents (or any app) call thousands of third‑party services – GitHub, Gmail, Notion, Slack, BigQuery, etc. – without giving the agent direct access to the user’s credentials. It provides a catalog of 1 000+ providers and 10 000+ pre‑built Actions (individual API calls) that agents can discover, inspect, and invoke.
Why it matters for AI | Modern LLM‑powered agents need to act on real‑world data and perform tasks (send email, update a spreadsheet, query a database). Managing OAuth flows, API keys, and policy enforcement for each agent is complex and a security risk. OpenConnector centralises credential handling and exposes a stable, inspectable API that agents can call safely.
Key components
- Connector catalog – a shared registry of providers and Actions with request/response schemas, required scopes, and executable code.
- Runtime gateway – a Node.js/Cloudflare‑compatible service that stores credentials, enforces policies, logs runs, and executes Actions.
- Developer tools –
- Connector SDK (TypeScript client) for programmatic use.
- oo CLI for local agent relay and debugging.
- MCP endpoint for agents that understand the MCP protocol.
- Direct HTTP/OpenAPI access.
- Web console – UI for browsing the catalog, configuring credentials, creating runtime tokens, and inspecting logs.
Deployment options
- Managed (OOMOL) – hosted OAuth apps and runtime, no infrastructure to run.
- Self‑hosted – Docker Compose or plain Node.js; stores state in SQLite (default) or PostgreSQL; can use S3‑compatible storage for file transit.
- Platform‑agnostic – works on Cloudflare Workers, Fly.io, RepoCloud, nibrun, NEXUS AI, etc.
Typical workflow
- Connect a user account – via API key or OAuth2 (e.g.,
PUT /api/connections/github). - Agent discovers an Action – queries the catalog or OpenAPI spec for
github.get_current_user. - Agent calls the Action –
POST /v1/actions/github.get_current_userwith the runtime token. - Gateway executes – uses stored credentials, applies any allow/block policies, logs the run, and returns the result.
Who should use it
- Teams building AI‑driven products that need reusable, auditable access to users’ SaaS tools.
- Developers who want a plug‑and‑play catalog of actions without writing individual OAuth integrations.
- Organizations that prefer to keep credentials behind a controlled runtime while still allowing agents to act.
Getting started
# Quick local launch (Docker Compose pulls the pre‑built image)
docker compose up
# Verify with a no‑auth action
curl -X POST http://localhost:3000/v1/actions/hackernews.get_top_stories \
-H 'content-type: application/json' -d '{"input":{}}'
Then open http://localhost:3000 for the console or http://localhost:3000/docs for the OpenAPI reference.
License & community
- Apache‑2.0 license for the code; third‑party provider assets are not covered.
- Open to contributions (see
CONTRIBUTING.md), with a friendly code of conduct.
OpenConnector therefore serves as the plumbing that lets LLM agents safely and reliably interact with the vast ecosystem of web services.
Related
- Project
- Project
- Project
- Project
- Project