Resources
Connections are how agents reach your tools.
A resource is a connection to Postgres, Kubernetes, Slack, GitHub, or any HTTP API — with a name you choose. Connect it once. Every agent in the workspace can use it. Access keeps the password. The agent never sees it.
You decide whether it can only read, or also write, and whether some actions need your approval.
A secret is different: Chat can’t use it. A workflow can send it only to the hosts you listed. See Secret.
How to connect
Go to Resources → New, pick a kind, and fill in the fields (or sign in with OAuth). Or ask Chat:
Connect Postgres.
Chat opens the same form, with what it already knows filled in. You still type the password.
How it works
- You enter the details — host, database, user, password, or a sign-in with the service.
- Access tests the connection and keeps the password. The agent never sees it.
- You choose what it may do — start read-only, then allow writes when the job needs them.
- The connection is ready — agents in Chat, agents you bring from Cursor, and workflows all use it.
💡 Tip: Give each connection a name you’ll recognize later, like “prod Postgres” or “ops Slack.” That’s the name you mention in Chat.
What you can connect
| Kind | What it is | Examples |
|---|---|---|
| Built-in tools | Databases, clouds, and CLIs Access already knows | Postgres, MySQL, SQLite, Redis, Kubernetes, GitHub, AWS |
| Apps over HTTP | Services with an API Access can call, including many from their OpenAPI specs | Slack, Gmail, Jira, HubSpot, Box, a generic HTTP API |
| Developer platforms | Cloud and CI tools in the same picker | Vercel, Cloudflare, Neon, and others |
| Secret | A credential only workflows can send, and only to hosts you list | Secret |
| Context | Something to learn from, not to change | A docs folder, a git repo, a dbt project |
See the kind pages under Integrations. Messaging, email, and SMS kinds show up in Resources → New even when they don’t have a docs page yet.
Keep it safe
- Start read-only. Allow writes when the job needs them.
- Extra roles let you require a person for some actions, or approve them ahead of time.
- Chat can ask to change a connection setting. Approve or deny that change — passwords still aren’t filled in from the thread.
- If a workflow hits a step that needs you, the run pauses as Waiting on approval. Approve that step, then continue. See Workflows.
- Rotate or revoke from the resource settings. Access does not hand the password to the agent.
- Reconnecting an OAuth app reuses the client secret Access already stored.