---
title: "Connector catalog"
description: "The 35 connector presets Chickpea offers for new connections, their lanes and authorization, plus the native lanes and the two legacy presets."
---

> Documentation Index
> Fetch the complete documentation index at: https://docs.chickpea.co/llms.txt
> Use this file to discover all available pages before exploring further.

# Connector catalog

A **connector preset** is a stored recipe for reaching one external service: its lane, its endpoint, and the authorization it expects. Where a [connection](/agents/connections) is one authorized account owned by one Agent, a preset is the template that account is created from. This page lists the 35 presets offered for new connections, the three lanes they run on, the native lanes for services with no preset, and the two legacy presets kept only for existing records.

Source of truth: `src/config/presets.ts`. `CONNECTION_CATALOG_PRESETS` is the exact list offered for a new connection, sorted by name. Managed capability surfaces come from `src/connections/catalog/`.

## Lanes

| Lane | How the call is made | Who holds the credential | Presets |
|---|---|---|---|
| Managed | Composio executes a curated Chickpea capability against one pinned connected account | Composio holds OAuth storage, refresh, and API execution | 13 |
| Vendor MCP | The deployment connects to the vendor's hosted MCP server over streamable HTTP | The deployment | 20 |
| Direct API | The deployment calls the vendor's HTTP API on an allowlisted host, path prefix, and method set | The deployment | 2 |

Credentials never enter model context or the tool arguments the model writes. The model picks a connection by ID and the secret goes in at egress.

## The catalog

35 presets, sorted by name, the order `CONNECTION_CATALOG_PRESETS` holds them in.

| Connector | Lane | Authorization | Notes |
|---|---|---|---|
| Ahrefs | Vendor MCP | Bearer, Ahrefs MCP key | Lite plan or higher. A dedicated MCP key is required; regular API keys are not accepted. |
| Airtable | Vendor MCP | OAuth | Read and write on records, schemas, and comments in the approved workspaces and bases. |
| Asana | Direct API | Bearer, personal access token | |
| Atlassian | Vendor MCP | OAuth | Jira, Confluence, Compass, and Teamwork Graph tools still follow user permissions and organization policy. |
| Cloudflare API | Vendor MCP | OAuth | Three tools cover the API: docs, search, and execute. Actions stay limited to the approved permissions. |
| Exa | Vendor MCP | `x-api-key` header, optional | Also works without a key at lower limits. |
| Firecrawl | Vendor MCP | Bearer, `fc-…` | |
| Fireflies | Vendor MCP | Bearer, Fireflies API key | |
| Gamma | Vendor MCP | `X-API-KEY` header, `sk-gamma-…` | API keys require a Pro, Ultra, Teams, or Business plan. |
| Gmail | Managed | Composio OAuth | Read and write. Also connectable through the legacy Google Workspace lane. |
| Gong | Managed | Composio OAuth | Read only. Pending until an Admin selects one or more workspaces. |
| Google Ads | Managed | Composio OAuth | Pending until an Admin selects one or more client accounts. Manager accounts are never valid targets. Budget changes are a spend lane. |
| Google Analytics | Managed | Composio OAuth | Read only. Pending until an Admin selects one or more GA4 properties. |
| Google Calendar | Managed | Composio OAuth | Read and write, including event deletion. Also connectable through the legacy Google Workspace lane. |
| Google Docs | Managed | Composio OAuth | Read and write. Managed lane only. |
| Google Drive | Managed | Composio OAuth | Read and write. Also connectable through the legacy Google Workspace lane. |
| Google Search Console | Managed | Composio OAuth | Read only. Pending until an Admin selects one or more sites. |
| Google Sheets | Managed | Composio OAuth | Read and write on bounded ranges. Managed lane only. |
| Google Slides | Managed | Composio OAuth | Read and write through reviewed slide operations. Managed lane only. |
| Granola | Vendor MCP | OAuth, scope `mcp` | Personal browser OAuth. Anyone who can use the profile may query meetings available to the connected account. |
| HubSpot | Managed | Composio OAuth | Bound to one portal, checked at validation. Triggers are off. |
| Hugging Face | Vendor MCP | Bearer, `hf_…` | An access token with read scope. |
| incident.io | Vendor MCP | Bearer, incident.io API key | Public beta on Team, Pro, and Enterprise plans. |
| Intercom | Vendor MCP | OAuth | US-hosted workspaces only. EU and Australian workspaces cannot use this preset. |
| Linear | Vendor MCP | OAuth, scope `read write` | |
| LunarCrush | Vendor MCP | Bearer, LunarCrush API key | The API key requires a LunarCrush subscription. |
| Monday.com | Vendor MCP | Bearer, monday.com API token | Hosted MCP OAuth exists upstream; this release keeps the token path. |
| Neon | Vendor MCP | Bearer, Neon API key | |
| Notion | Managed | Composio OAuth | Notion's own page and database picker is the authorization boundary. |
| PostHog | Vendor MCP | OAuth | Routes to the US or EU region and provides the tools the account allows. |
| Sentry | Vendor MCP | OAuth | The OAuth resource can be narrowed to one organization, or one organization and project. |
| Stripe | Vendor MCP | Bearer, `rk_live_…` | Use a restricted key, not a full secret key. |
| Supabase | Vendor MCP | OAuth | Intended for a development or test project, not production data. Read-only access is the recommended default. |
| YouTube | Managed | Composio OAuth | Pending until an Admin selects one or more channels. Every write is external publication. |
| Zendesk | Direct API | Basic, base64 of `<email>/token:<api_token>` | Host is the workspace subdomain. |

## Managed connectors

The managed lane runs through one Composio project key, added under **Settings → Connectors**. Without that key the adapter is dormant and the native API and MCP lanes continue to work. Composio holds OAuth storage, refresh, and API execution for managed accounts; Chickpea still owns account selection, capability limits, confirmation policy, and which provider account is used on every call.

Each managed connector exposes a fixed capability list rather than the vendor's whole toolkit. Choosing read and write adds the write capabilities to the read capabilities. Three connectors have no write lane at all: Gong, Google Analytics, and Google Search Console.

Five managed connectors stay pending after sign-in until an Admin selects the resources they may reach. Chickpea stores an opaque local handle and a display label; the provider reference is inserted inside the execution adapter and never reaches the Agent.

| Connector | Required selection | Multiple allowed |
|---|---|---|
| Gong | Gong workspaces | Yes |
| Google Ads | Google Ads client accounts | Yes |
| Google Analytics | GA4 properties | Yes |
| Google Search Console | Search Console sites | Yes |
| YouTube | YouTube channels | Yes |

Gmail, Google Calendar, and Google Drive carry a native fallback: their presets name `google-workspace` as a connection preset, so those three services can also be authorized through a Google Cloud OAuth client instead of Composio. Google Sheets, Google Docs, and Google Slides are managed only.

## Vendor MCP presets

All 20 vendor MCP presets use the `streamable-http` transport. Their authorization splits three ways.

| Authorization | Count | Presets |
|---|---|---|
| OAuth | 9 | Airtable, Atlassian, Cloudflare API, Granola, Intercom, Linear, PostHog, Sentry, Supabase |
| Bearer token | 9 | Ahrefs, Firecrawl, Fireflies, Hugging Face, incident.io, LunarCrush, Monday.com, Neon, Stripe |
| Custom header | 2 | Exa (`x-api-key`), Gamma (`X-API-KEY`) |

Five OAuth presets request a fixed scope string: Airtable, Atlassian, Granola (`mcp`), Linear (`read write`), and Supabase. Cloudflare API, Intercom, PostHog, and Sentry send no scope and take whatever the provider's consent screen grants.

Exa is the only preset whose credential is optional: the connection stays usable with no key stored, at the server's lower anonymous limits. Sentry is the only preset with a provider-owned URL narrowing, `sentry-org-project`, which pins the scoped URL on every request.

## Direct API presets

Two presets call a vendor HTTP API directly. Each connection is confined to the hosts, path prefixes, header, and methods below.

| Preset | Hosts | Path prefixes | Header | Methods |
|---|---|---|---|---|
| Asana | `app.asana.com` | `/api/1.0` | `Authorization: Bearer ` | GET, POST, PUT |
| Zendesk | `<subdomain>.zendesk.com` | `/api/v2` | `Authorization: Basic ` | GET, POST, PUT |

Zendesk's host is a template. The subdomain is supplied when the connection is created and becomes the single allowed host.

## Native connections

Any service without a preset connects on one of two native lanes.

- **Native MCP.** A remote MCP server URL on the `streamable-http` transport. The authorization mode is `bearer` when a credential is supplied and `none` when it is not. Extra request headers are named in the connection policy, and one of them may carry the account's single write-only credential.
- **Native API.** An HTTP endpoint URL. The host of that URL becomes the only allowed host and its path becomes the only allowed path prefix. The default header is `Authorization: Bearer `, and the allowed methods are chosen from GET, HEAD, POST, PUT, PATCH, and DELETE.

## Legacy presets not offered for new connections

`CONNECTION_CATALOG_PRESETS` filters two entries out of `CONNECTOR_PRESETS`. Both remain defined so existing connection records stay readable and editable.

**`notion`, named Native Notion.** A vendor MCP preset at `https://mcp.notion.com/mcp` with Notion's user OAuth. New Notion connections use the managed lane instead. When one Agent owns both a legacy and a managed Notion account, an unnamed Notion request withholds both paths and asks the member to choose a label; naming one account selects only that path.

**`google-workspace`.** A direct API preset that uses one Google OAuth client for several services at once. Its hosts are `gmail.googleapis.com` and `www.googleapis.com`, its path prefixes are `/gmail/v1/users/me`, `/calendar/v3`, and `/drive/v3`, and its methods are GET and HEAD only. It is not offered as a catalog entry of its own, but the Gmail, Google Calendar, and Google Drive service presets still open and update this one shared connection, so its OAuth client, token bundle, identity, and refresh lease stay shared.

## Lookup names

A preset matches on its id, its name, or an alias, compared after lowercasing and collapsing every run of non-alphanumeric characters to a single space. A value that matches more than one preset resolves to nothing rather than guessing.

| Preset | Aliases |
|---|---|
| Gmail | Google Mail |
| Google Calendar | Calendar, GCal |
| Google Docs | Docs |
| Google Drive | Drive |
| Google Sheets | Sheets |
| Google Slides | Slides |

No other preset defines an alias.

Source: https://docs.chickpea.co/reference/connector-catalog/index.mdx