Connecting Apps with MCP Tools (OAuth)

Last updated About 10 hours ago

Overview

The Tool Store features a massive library of MCP (Model Context Protocol) Server Tools. Unlike custom REST API integrations that require manual schema configuration and API keys, MCP tools offer a seamless, one-click setup using OAuth.

When you connect an MCP tool (like HubSpot, Jira, or Slack), you authenticate using your own account. This means the Mate acts securely on your behalf, respecting your exact access rights and permissions within that third-party application.

How to Connect an MCP Tool

Connecting a new service to your workspace takes just a few seconds:

  1. Navigate to Mates & Tools > Tool Store in the left sidebar.
  2. Browse or search for the application you want to connect (e.g., HubSpot).
  3. Click on the tool to open its details, then click the + Create instance button.
  4. A secure authentication popup will appear. Log in using your existing credentials for that service (e.g., your Google or Microsoft account).
  5. Grant the necessary permissions when prompted.

Once authenticated, the tool instance is created and ready to be attached to your Mates!

Attaching the Tool to a Mate

For a Mate to use your newly connected app, you must attach the tool instance to it:

  1. Go to Manage Mates and select the Mate you want to equip.
  2. Open the Tools tab.
  3. Click + Attach tool and select your new MCP tool instance from the list.
  4. Click Update to save the Mate's configuration.

Security and Privacy (How OAuth Works)

MCP tools use OAuth authentication, which provides a highly secure way to integrate services:

  • User-Level Access: The connection is tied to your specific account. The Mate can only see and interact with data that you personally have permission to access in the third-party app.
  • No Shared Keys: You don't need to generate, copy, or manage sensitive API keys.
  • Revocable Access: You remain in full control. You can revoke the Mate's access at any time directly from the security settings of the connected application (e.g., from your HubSpot or Google account settings).

💡 Tip: If a colleague wants to use the same MCP tool with a Mate, they will be prompted to authenticate with their own credentials the first time they interact with it, ensuring data governance is always maintained.