Open Connector
Connect an AI agent to user-owned services without putting credentials in agent code.
Open Connector is a credential broker for AI agents. It keeps third-party credentials at the broker boundary, while your application or agent gets only the ability to connect an account and call an allowed tool.
Start with the hosted console; self-host when you need to run the broker in your own environment. Both paths use the same project, connection, and tool-call model.
How it works
- Your agent authenticates with a project API key.
- Open Connector resolves a connected account and injects its credential server-side.
- The provider API receives the request; the agent receives the result, not the credential.
Choose your path
Use Open Connector Cloud
Create a project in the console, connect a service, and make a tool call. No local infrastructure.
Self-host Open Connector
Run the same broker on infrastructure you control, with your own database and encryption key.
What it provides
| Feature | Detail |
|---|---|
| Encrypted vault | AES-256-GCM at rest; self-hosted instances control CONNECTOR_ENCRYPTION_KEY |
| Composio SDK compatible | Drop-in replacement — same SDK, one baseURL change |
| Multi-auth types | OAuth2 (PKCE + refresh), API_KEY, and BASIC auth all supported |
| Tamper-evident audit trail | SHA-256 hash chain — any tampered record breaks the chain |
| Self-hostable | Your Postgres, your OAuth apps, your keys — no vendor lock-in |
| Open source | Fork it, audit it, contribute to it — see LICENSING.md |
| Agent-native auth | x-api-key header with scoped metadata per Project |
Connector catalog
The catalog contains connector definitions and their available auth methods. A connector becomes usable only when its auth method is available on the target instance and you create an auth config for it. Browse Connectors before building against a provider.
Get started
What is Open Connector
Understand the problem, solution, and how it compares to Composio.
Quickstart
Use the hosted console to create a project, connect GitHub, and make a brokered call.
Core Concepts
Learn the key entities: Organization, Project, Auth Config, Connection, Tool Call.
Self-Hosting
Run Open Connector on infrastructure you control.
Connectors
Browse supported services and their available tools.
Security
Encryption, audit trail, and threat model details.
Documentation map
- Start here — SaaS quick start and the tenancy model.
- Build agents — API keys, connections, tools, and Composio SDK compatibility.
- Self-hosting — local development, environment configuration, database operations, and the AWS production runbook.
- API reference — live OpenAPI and Scalar endpoints plus the broker surface.