> ## Documentation Index
> Fetch the complete documentation index at: https://onecli.sh/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# App Connections: How OAuth & API Keys Work

> How OneCLI stores and injects OAuth tokens and API keys for connected apps. Token refresh, credential encryption, and the connection lifecycle.

## Overview

Connect agents to external services like Gmail, GitHub, AWS, and more. The gateway handles OAuth token refresh, API key injection, and SigV4 signing automatically.

<Frame>
  <img src="https://mintcdn.com/chartdbinc/WHxYCiD2RgHrla4w/images/connections-apps.png?fit=max&auto=format&n=WHxYCiD2RgHrla4w&q=85&s=bac09b681aaacada5c1085102445d539" alt="App Connections in the OneCLI dashboard" width="2000" height="1208" data-path="images/connections-apps.png" />
</Frame>

## Cloud integrations

These integrations have additional features on OneCLI Cloud, such as cross-account IAM roles or managed OAuth credentials.

| Service                                            | Auth method                                          | Highlights                                                       |
| -------------------------------------------------- | ---------------------------------------------------- | ---------------------------------------------------------------- |
| [AWS](/integrations/aws)                           | Access keys (Free) or cross-account IAM role (Cloud) | SigV4 signing, per-agent session policies, temporary credentials |
| [Datadog](/integrations/datadog)                   | API key + App key                                    | Multi-region support, query metrics and monitors                 |
| [Microsoft Word](/integrations/microsoft-word)     | OAuth                                                | Read and edit Word documents in OneDrive and SharePoint          |
| [Outlook Mail](/integrations/outlook-mail)         | OAuth                                                | Read, send, and manage Microsoft 365 email                       |
| [Outlook Calendar](/integrations/outlook-calendar) | OAuth                                                | Events, scheduling, and availability via Microsoft 365           |

## All app connections

### Google Workspace

| Service                                                      | Auth method | What agents can do                               |
| ------------------------------------------------------------ | ----------- | ------------------------------------------------ |
| [Gmail](/integrations/gmail)                                 | OAuth       | Search, read, draft, and send emails             |
| [Google Calendar](/integrations/google-calendar)             | OAuth       | List events, create meetings, check availability |
| [Google Drive](/integrations/google-drive)                   | OAuth       | Search, read, create, and organize files         |
| [Google Docs](/integrations/google-docs)                     | OAuth       | Read and create documents                        |
| [Google Sheets](/integrations/google-sheets)                 | OAuth       | Read, write, and create spreadsheets             |
| [Google Slides](/integrations/google-slides)                 | OAuth       | Read and create presentations                    |
| [Google Forms](/integrations/google-forms)                   | OAuth       | Create forms, read responses                     |
| [Google Meet](/integrations/google-meet)                     | OAuth       | Create meetings, list recordings                 |
| [Google Photos](/integrations/google-photos)                 | OAuth       | Search and manage photos and albums              |
| [Google Tasks](/integrations/google-tasks)                   | OAuth       | Create, complete, and organize tasks             |
| [Google Admin](/integrations/google-admin)                   | OAuth       | Manage users, groups, and org units              |
| [Google Analytics](/integrations/google-analytics)           | OAuth       | Query reports and traffic data                   |
| [Google Search Console](/integrations/google-search-console) | OAuth       | Search performance, URL inspection, indexing     |
| [Google Classroom](/integrations/google-classroom)           | OAuth       | Manage courses, assignments, students            |
| [YouTube](/integrations/youtube)                             | OAuth       | Channels, search, playlists, analytics           |

### Developer tools

| Service                                | Auth method         | What agents can do                                        |
| -------------------------------------- | ------------------- | --------------------------------------------------------- |
| [GitHub](/integrations/github)         | OAuth or GitHub App | Read and write code, manage PRs, issues, and Actions      |
| [Cloudflare](/integrations/cloudflare) | API token           | Deploy Workers, manage DNS, KV, D1, Pages, Queues         |
| [Jira](/integrations/jira)             | OAuth               | Create and update issues, search with JQL, manage sprints |
| [Confluence](/integrations/confluence) | OAuth               | Search, read, and create wiki pages                       |
| [Notion](/integrations/notion)         | OAuth               | Search pages, read and write content, manage databases    |
| [Todoist](/integrations/todoist)       | OAuth               | Create, complete, and organize tasks                      |

### Cloud and AI

| Service                              | Auth method                        | What agents can do                              |
| ------------------------------------ | ---------------------------------- | ----------------------------------------------- |
| [Vertex AI](/integrations/vertex-ai) | Service account or authorized user | Access Vertex AI models (Claude on GCP, Gemini) |

### Email and communication

| Service                        | Auth method | What agents can do                               |
| ------------------------------ | ----------- | ------------------------------------------------ |
| [Resend](/integrations/resend) | API key     | Send transactional emails, check delivery status |