Connect safely
Use OAuth or scoped service keys. Raw website passwords never enter the product.
One key. Every connected account.
Give your AI access.
Keep the keys.
Connect Google, GitHub, Reddit, Appwrite and Steel once. Issue a single revocable API key with exactly the access your AI needs.
OAuth where possible Secrets encrypted Deny by default
connectpolicy engine
GGoogle
GHGitHub
RReddit
AAppwrite
SSteel
cnk_live_••••
Issue one key
Pick providers, actions, expiry and rate limit. The secret is shown only once.
Watch every call
See allowed, denied and failed requests. Revoke access instantly when needed.
Built for an untrusted caller
“Full access” has a hard ceiling.
Expanded mode can enable every action in Connect’s reviewed catalog. It can never expose raw tokens, arbitrary URLs, account deletion, secrets, billing or unrestricted browser navigation.
Private by design
Your accounts stay behind one locked door.
Only the configured owner can manage connections or issue keys. The AI-facing endpoint has no cookie access and accepts only scoped bearer keys.