Connector catalogue

Browser-safe definitions are exported from @jskit-ai/connectors-catalog/shared. Import a provider individually from @jskit-ai/connectors-catalog/server/<id>; the id is the linked guide's filename without .md. HTTP and MCP providers compose with createConnectionService from connectors-core; each contains request validation and a small useful operation set, not application business workflows. There is no automatic provider installation or activation.

Each application owns its registration, callback, credentials and grants. Read the core package's callback guide and application setup contract, which apply to hosted editors, installed editors and CLI use. There is no shared Vibe64 provider registration or token gateway.

Finding setup instructions from a CLI or coding agent

Start with the selected provider's guide in docs/<provider-id>.md, linked below. It describes credential acquisition, required permissions, environment choices and the adapter's supported operations. Read only the selected provider's recipe and shared contracts it references. A configured credential is not proof that the application's requested feature is implemented.

integrations.json is application-owned source; secret values belong in the application's Env or private grant storage. The same files can be authored by hand, by a coding agent or by an editor. Genesis is optional: when used, selected Stack guidance should lead to these same documents, while the application records its actual environment requirements and implemented commands.

For full Stripe/Paddle checkout, subscriptions, features and usage credits, continue to application-owned payments and its standalone composition. The narrow catalogue connector alone does not implement billing. Other technologies can read the static payment contract, schema and examples without executing JavaScript; their own framework owns runtime implementation. An editor management command is optional for standalone CLI use, and does not replace application authorization.

Definitions can expose verificationFields with name, label, hint and required for non-secret text inputs used by a provider's check operation. Sheets, Docs and Slides expose their resource IDs this way. Excel supplies a workbook drive item ID, SharePoint a site-search term, PostHog a flag-evaluation identity, Maps an address and X a public username. Maps and X field hints identify provider usage charges before the explicit check. A UI passes entered values through verificationInput on Connect; CLI callers supply the same operation input. These are check parameters, separate from source configuration and credentials. Provider request validation remains authoritative.

| Provider | Export | Initial operations | Authentication | |---|---|---|---| | AI | createAiConnectionResolver | Static catalogue and authorized SDK parameters; app-owned inference | Free public Zen default, administrator Env key or private individual grant | | Wiz | createWizScanner | Authorised source-directory scan, policy verdict and report; separate CLI runtime | Own Cognito service account; installed Wiz v1 CLI | | Shopify | shopifyProvider | products.list, products.create, products.update, products.delete; assistant policies | Organization client credentials or existing Admin API token | | Confidence Flags | confidenceFlagsProvider, registerConfidenceClient | tools.list, tools.call; explicit client setup | Assistant OAuth for flag management | | Confidence Exp | confidenceExpProvider, registerConfidenceClient | tools.list, tools.call; explicit client setup | Assistant OAuth for experiment analysis | | Lightspeed | lightspeedProvider | products.list, customers.list, outlets.list, sales.list, inventory.list | Own X-Series OAuth registration and store prefix | | Microsoft Fabric | microsoftFabricProvider | connection.check, schema.types, graphql.execute | Tenant-specific user consent or service principal; one GraphQL endpoint | | X (Twitter) | xTwitterProvider | users.lookup, users.posts | App-only bearer token; public reads | | Snowflake | snowflakeProvider | databases.list | Account-specific custom OAuth; optional role and bounded metadata pages | | Workday | workdayProvider | workers.me, workers.list | Per-user confidential tenant OAuth; Staffing v7 worker reads | | Gemini Enterprise | geminiEnterpriseProvider | engine.get, search | Google OAuth; configured project, region and engine; shared search identity | | Wix | wixProvider | sites.list | Own account API key; explicit site pages | | TikTok | tiktokProvider | profile.read, profile.extended, profile.stats, videos.list | Own confidential Web OAuth; optional profile/statistics/video permissions | | LinkedIn | linkedinProvider | profile.read, posts.create | Own OAuth; approved member text publishing; reconnect unless refresh is approved | | Google Ads | googleAdsProvider | customers.listAccessible, customers.listClients, reports.search | Own Google OAuth plus developer token or approved Cloud organization | | Salesforce | salesforceProvider | limits.read, objects.list, objects.describe, query.read, query.next | Own confidential OAuth, My Domain and production/sandbox settings | | Firebase Cloud Messaging | firebaseCloudMessagingProvider | connection.check, messages.validate, messages.send; public web configuration helper | Explicit service-account JSON reference and target project; optional web push | | dbt Semantic Layer | dbtSemanticLayerProvider | environment.read, metrics.list, dimensions.list, savedQueries.list | Customer service token, GraphQL host and exact text Environment ID; metadata only | | Databricks | databricksProvider | jobs.list, jobs.get | Custom user OAuth application or service principal; per-workspace URL | | Hex | hexProvider, registerHexClient | tools.list, tools.call; explicit client setup | Assistant OAuth; standard, EU and HIPAA endpoints | | Granola | granolaProvider | notes.list, notes.get, folders.list, transcripts.list | Own personal/workspace API key; MCP is separate | | Zoho Books | zohoBooksProvider | organizations.list, contacts.list, invoices.list | Own regional web OAuth registration; explicit organisation selection | | Zoho CRM | zohoCrmProvider | users.current, leads.list, contacts.list, accounts.list, deals.list | Own regional web OAuth registration | | Wave | waveProvider | user.read, businesses.list, customers.list, invoices.list | Own web OAuth registration | | Semrush | semrushProvider | projects.list, projects.get | Own V4 API key with read permission | | Xero | xeroProvider | connections.list, organisation.read, contacts.list, invoices.list | Own web OAuth registration, Basic client authentication | | Resend | resendProvider | Domains, transactional sending, contacts/segments and draft/review/send broadcasts | Own API key, Full access | | Firecrawl | firecrawlProvider | credits.read, pages.scrape | Own team API key | | Gmail | gmailProvider | profile.read, messages.list, messages.get | Own OAuth registration | | Google Drive | googleDriveProvider | files.list | Own OAuth registration | | Google Sheets | googleSheetsProvider | spreadsheets.get, values.get | Own OAuth registration | | Google Docs | googleDocsProvider | documents.get | Own OAuth registration | | Google Slides | googleSlidesProvider | presentations.get | Own OAuth registration | | Google Search Console | googleSearchConsoleProvider | sites.list | Own OAuth registration | | Airtable | airtableProvider | bases.list | Own personal access token | | Notion | notionProvider | Search, page/block reads and writes, data-source queries; separate MCP tools | Own internal token, REST OAuth or separate MCP client | | Brevo | brevoProvider | contacts.list | Own API key | | ElevenLabs | elevenlabsProvider | account.read, voices.list | Own API key | | GitHub API | githubApiProvider | account.read, repositories.list | Own personal access token | | Apify | apifyProvider | actors.list | Own API token | | Calendly | calendlyProvider | profile.read, eventTypes.list | Own personal access token | | HubSpot | hubspotProvider | Contact/deal list/get/create/update, relationships and pipeline reads | Own private/static token or project OAuth | | Linear | linearProvider | profile.read, issues.list | Own personal API key | | Pipedrive | pipedriveProvider | Profile; deals, people, organizations, activities, leads and pipeline reads; basic record create/update | Own user/company API token | | GitLab API | gitlabApiProvider | profile.read, projects.list | Own GitLab.com personal access token | | Tally | tallyProvider | forms.list | Own API key | | Contentful | contentfulProvider | entries.list | Own Content Delivery key, space and environment | | Asana | asanaProvider | workspaces.list | Own personal access token | | Microsoft Outlook | microsoftOutlookProvider | folders.list, inbox.list | Own delegated OAuth registration | | Microsoft OneDrive | microsoftOneDriveProvider | items.list/get, files.upload | Own delegated OAuth registration | | Microsoft Excel | microsoftExcelProvider | worksheets.list, ranges.get/update, sessions.create/close | Own delegated OAuth registration | | Microsoft Teams | microsoftTeamsProvider | Team/channel/chat reads and message/reply sends | Own organizational OAuth registration | | Microsoft OneNote | microsoftOneNoteProvider | notebooks.list, sections.list, pages.list/content/create/append | Own delegated OAuth registration | | Microsoft Word | microsoftWordProvider | items.list, items.get | Own delegated OAuth registration | | Microsoft PowerPoint | microsoftPowerPointProvider | items.list, items.get | Own delegated OAuth registration | | Microsoft SharePoint | microsoftSharePointProvider | sites.search | Own organizational OAuth registration |

| Stripe | stripeProvider | balance.read | Own restricted/secret API key | | Replicate | replicateProvider | Account/hardware, model schema, prediction submit/poll/cancel | Own API token | | Sentry | sentryProvider | organizations.list | Own Sentry.io personal token | | incident.io | incidentIoProvider | Incidents/follow-ups, alert resolution, schedule reads, catalogue entries | Own API key | | Fireflies | firefliesProvider | profile.read, transcripts.list | Own API key |

| HeyGen | heygenProvider | profile.read, voices.list | Own API key | | Perplexity | perplexityProvider | requests.list, models.list | Own project API key | | Supabase | supabaseProvider | projects.list | Own Management API personal token | | Google Analytics | googleAnalyticsDefinition (shared configuration) | Framework-owned Google tag | Public Measurement ID | | BigQuery | bigqueryProvider | projects.list | Own OAuth registration | | Paddle | paddleProvider | products.list | Own sandbox/live API key | | Mailgun | mailgunProvider | domains.list | Own US/EU account API key | | Fireworks AI | fireworksAiProvider | accounts.list | Own API key with account read access | | GatewayAPI | gatewayApiProvider | balance.read | Own Global/EU API token | | Polar | polarProvider | products.list | Own sandbox/production organization token | | Storyblok | storyblokProvider | space.read, stories.list | Own public/preview space token, five regions | | Twitch | twitchProvider | token.validate, profile.read, channels.followed | Own application-specific confidential OAuth registration | | Slack | slackProvider | auth.test, channels.list, groups.list, directMessages.list, groupMessages.list | Own OAuth registration, connected user or installed bot | | Oura | ouraProvider | Daily/detailed sleep, readiness, activity, heart rate and profile reads | Own per-user OAuth registration | | Algolia | algoliaProvider | indices.list, index.search | Own application ID and backend API key; optional frontend key reference | | Twilio | twilioProvider | calls.list | Own regional Account SID, Standard API Key SID and secret | | Gong | gongProvider | users.list | Own company access key and secret, optional company API origin | | PostHog | posthogProvider | flags.evaluate, events.capture | Own public project token, numeric project ID and EU/US region; explicit verification subject | | Chargebee | chargebeeProvider | customers.list | Own site name and API key with transactional-data read access | | Ashby | ashbyProvider | jobs.list | Own organization key with Jobs: Read access | | Lexware | lexwareProvider | Accounting resource reads, article/voucher pages, invoices.createDraft | Own private Public API key with selected read/create permissions | | Sevdesk | sevdeskProvider | contacts.list | Own account API token, raw Authorization header | | Apollo.io | apolloIoProvider | accounts.search | Own workspace API key scoped to saved-account search | | Attention | attentionProvider | conversations.list | Own organization API key | | Telegram | telegramProvider | profile.read, webhook.read | Own bot token | | KLIPY | klipyProvider | Clip/GIF/sticker/existing-emoji trending and search | Own app key; generation unavailable | | Mapbox | mapboxProvider | token.read, geocoding.forward, geocoding.reverse, directions.get | Backend token or browser-only public-token configuration | | Logo.dev | createLogoDevImageUrl (client export) | Public image URL construction | Publishable image key; no server connection grant | | Google Maps Platform | googleMapsPlatformProvider | geocoding.forward, geocoding.reverse | Server API key, optional browser-key reference and an explicit verification address | | WooCommerce | woocommerceProvider | products.list, orders.list | Own HTTPS store, consumer key and secret reference | | PrestaShop | prestashopProvider | products.list, orders.list | Own HTTPS store and Webservice API key reference | | ClickHouse | clickhouseProvider | connection.check, tables.list, columns.list, rows.list | Own HTTPS endpoint; Basic database credentials or explicit no-credentials mode | | WordPress (self-hosted) | wordpressSelfHostedProvider | users.me, posts.list | Own HTTPS site, username and Application Password reference | | WordPress.com | wordpressComProvider | profile.read, sites.list, posts.list | Own OAuth registration, verified client and permissions | | n8n | n8nProvider | tools.list, tools.call | Assistant MCP access token, own instance URL | | Sanity | sanityProvider | tools.list, tools.call | Assistant API token, hosted MCP endpoint | | Inngest | inngestProvider | apps.list, functions.list, events.send | Separate Signing Key and Event Key references | | Canva | canvaProvider, shared createCanvaClientMetadata | tools.list, tools.call; public metadata builder | Assistant OAuth, metadata URL, approved callback, no client secret | | Clay | clayProvider | identity.read, searches.create, searches.next | User/workspace Public API key | | Figma | figmaProvider | tools.list, tools.call; explicit registerFigmaClient setup | Approved confidential OAuth client | | Miro | miroProvider | tools.list, tools.call; explicit registerMiroClient setup | Own MCP OAuth client, selected team | | Atlassian | atlassianProvider, registerAtlassianClient | tools.list, tools.call; explicit client setup | Assistant OAuth, Rovo MCP v2, own confidential client | | Amplitude | amplitudeProvider, registerAmplitudeClient | tools.list, tools.call; explicit client setup | Assistant OAuth, US/EU, own confidential client | | AWS S3 | awsS3Provider | objects.list, objects.downloadUrl, objects.uploadUrl | Explicit AWS key/optional STS token | | AWS Athena | awsAthenaProvider | workgroup.get, query.start, query.status, query.results, query.cancel | Explicit AWS key/optional STS token | | Amazon Redshift | amazonRedshiftProvider | tables.list, table.describe, query.start, query.status, query.results, query.cancel | Explicit AWS key/optional STS token; serverless or provisioned |

The MCP providers use the official MCP SDK through a server-only transport. They initialize and list tools to verify transport access, then expose explicit tool calls under the existing connection policy. Discovery does not prove permission to execute every tool. Read the assistant OAuth pattern for Amplitude/Atlassian/Canva setup and the assistant MCP pattern before exposing calls. These definitions cannot select shared or per-user application mode. OAuth discovery, assistant attachment, resources, prompts and local stdio are not part of these initial fragments.

The definitions provide names, account modes, permissions and setup text to the shared configuration fields. API-key values belong in the environment or secret store; integrations.json stores references. Use the file connection store for text-based runtime persistence. SQL is an explicit application choice.

See the API-key connection pattern for library wiring usable from ordinary Node code and a manually composed CLI. The OAuth file-connection pattern covers consent and callbacks with the same text-based runtime storage. The Microsoft guide adds delegated OAuth wiring, registration automation and provider-specific account/permission requirements. Focused runtime tests cover the providers' requests, result validation, credential changes, isolation, errors and disconnect. Provider calls in those tests are simulated; live service use and sample-app generation are outside this delivery's test scope. Managed service credentials and sharing grants remain host-owned capabilities; an own key is not a managed subscription.

Logo.dev uses the public-image pattern and its client library export. Its runtimeKind: "public-resource" metadata distinguishes URL construction from the server adapters above. Image delivery is observed in the browser; constructing a URL never records Connected.

The AWS pattern composes the signed S3 and Athena libraries with the same file configuration and host authorization.