Docs / Connectors
What each connector can do
Connectors give your team's agents access to the tools you already use: your cloud, your error tracker, your issue tracker, your chat. Add one under Add connector, and every agent on the team can work with it, within the rules below.
The rules every connector follows
- A connector belongs to the team. Someone on the team connects it once, and the team's agents use that connection. Personal accounts such as Gmail and Google Drive are different: see Gmail and Google Drive.
- You choose who can use it. By default every member can use a new connector. Connectors whose key can't be limited on the provider's side, such as Upstash, and Trello start with only the person who connected them. Admins can change the list for any connector.
- Short-lived credentials where the provider allows it. For GitHub, Google Cloud, Azure, Tencent, Huawei, Linear, Jira, Asana, GitLab and others, Pangea hands the agent a token that expires, not the stored secret.
- The provider's own permissions still apply. The agent can only do what the account, role or app you connected is allowed to do. To keep an agent read-only, connect a read-only role.
- Risky steps wait for a human. Your workspace's approval rules apply to connector actions too, and every action lands in the audit trail.
No connector matches that search.
Infrastructure
| Connector | What the agent can do | How it connects |
|---|---|---|
| AWS | Inspect and change resources with the AWS CLI: EC2, S3, EKS, Lambda, IAM, VPC, CloudWatch and SNS. Includes a ready-made CloudWatch alarm → Pangea trigger → Slack workflow. | Credentials or a role you grant |
| Google Cloud / Firebase | Inspect and change GKE, Compute Engine, IAM and networking with gcloud. List Firebase projects and registered apps. | Service account through workload identity, short-lived tokens |
| Cloudflare | Inspect and change account resources: DNS, Workers, R2, Pages, D1 and KV. | API token |
| Microsoft Azure | Inspect and change subscription resources and AKS clusters with the Resource Manager API or the az CLI. | Short-lived ARM token |
| Linode | Inspect and change Akamai cloud instances and LKE clusters with linode-cli. | API token |
| Hetzner Cloud | Manage servers, volumes, networks, firewalls, load balancers, floating IPs and images with hcloud. | API token |
| Tencent Cloud | Inspect and change TKE, CVM, CLB, VPC and more with tccli. | Short-lived credentials |
| Alibaba Cloud | Inspect and change ACK, ECS, SLB, VPC, OSS and more with the aliyun CLI. | Account credentials |
| Volcengine | Inspect and change VKE, ECS, CLB, VPC, TOS, CDN and certificates through the OpenAPI or the ve CLI. | Account credentials |
| Huawei Cloud | Inspect and change CCE, ECS, ELB, VPC, OBS, RDS and more through the REST APIs. | Short-lived federated credentials |
| Kubernetes | Operate clusters with kubectl: EKS, GKE, TKE, ACK, LKE, VKE, AKS, and clusters in your own data center reached through the Pangea relay. | Cloud connector, or an outbound-only agent in your cluster |
| instabox | Run your agents on instabox cloud computers. | Your instabox account, billed by instabox |
Observability
| Connector | What the agent can do | How it connects |
|---|---|---|
| Sentry | List unresolved issues, read stack traces and events, and check release health. | OAuth |
| Grafana | Read dashboards, folders and datasources, run queries, manage alerting, and pull Loki logs and Prometheus metrics. | Service account, called through Pangea's proxy |
| PostHog | Run HogQL over events, persons and sessions, and read insights, dashboards, feature flags, cohorts and experiments. | OAuth |
| Better Stack | Inspect and manage uptime monitors and telemetry. | API token |
| Uptime Kuma | Read status monitors from your Uptime Kuma instance. | Instance URL and credentials |
Databases
| Connector | What the agent can do | How it connects |
|---|---|---|
| MongoDB | Run governed queries, read schemas and propose changes. | Connection string |
| Upstash | List, create and delete Redis databases, read usage and backups, and manage Vector indexes. | Management API key. Starts with only the person who connected it. |
Networking
| Connector | What the agent can do | How it connects |
|---|---|---|
| Tailscale | Inspect and change your tailnet through the Tailscale API, and reach machines on it. | OAuth client |
Compliance
| Connector | What the agent can do | How it connects |
|---|---|---|
| Vanta | Read your compliance posture: failing tests and vulnerabilities to fix for SOC 2, ISO 27001 or HIPAA. | API credentials, read-only |
| Secureframe | Read failing tests to fix for SOC 2, ISO 27001, HIPAA, PCI or GDPR. | API credentials, read-only |
| SonarQube | Read projects, Quality Gate status, issues, vulnerabilities, Security Hotspots and analyses. | Token |
Source control
| Connector | What the agent can do | How it connects |
|---|---|---|
| GitHub | Read code, open and review pull requests, work with issues and Actions, with gh or the API. | GitHub App installation, short-lived tokens |
| GitLab | Work with projects, merge requests, pipelines and repository contents, and clone and push over HTTPS. | OAuth, short-lived tokens |
Project management
| Connector | What the agent can do | How it connects |
|---|---|---|
| Linear | Read, create, comment on and close issues. | OAuth |
| Jira | Read, create, comment on and transition issues in Jira Cloud. | OAuth, short-lived tokens |
| Asana | Read, create, comment on and complete tasks. | OAuth, short-lived tokens |
| Trello | Read boards, lists and cards, and create, update, move and comment on cards. | Through Composio. Starts with only the person who connected it. |
Documents
| Connector | What the agent can do | How it connects |
|---|---|---|
| Notion | Search the workspace, read pages and databases, create and update pages, append blocks, and read and post comments. | Notion integration |
| Plaud | Search recordings, and read transcripts, summaries and highlights. | OAuth |
| Gmail and Google Drive | Personal, not team-wide: each member connects their own account. See the setup guide. | Your team's Google OAuth client |
| Connector | What the agent can do | How it connects |
|---|---|---|
| Resend | Send transactional email and check what happened to a message. With a full-access key, also read domains, audiences and contacts. | API key |
Messaging
| Connector | What the agent can do | How it connects |
|---|---|---|
| Slack | Chat with the agent from Slack channels and follow its work there. | Slack app |
| Discord | Answer mentions in your server, read recent messages, threads and pins, search, post and react. | Discord bot |
| Lark (Feishu) | Chat with the agent from Lark groups. | Lark app |
Updated November 12, 2026
Missing a tool? Tell us