# Connect a provider

Connecting a provider means giving the instance, once, a credential for an account at a service — through your company's app at that service, or with a token created by hand — so that missions can then use that account's resources without the agent ever holding the credential.

## The two ways

- **Through your company's app** (GitHub App, Supabase or Railway OAuth app). An administrator registers the app once, under Settings → Administration → Company apps or in the configuration (`providers.<id>.*`); then anyone connects an account in one click from Accounts → Connect an account. Tokens obtained this way are short-lived or refreshed by the instance. For GitHub, the app is created from the page itself.
- **With a token pasted by hand.** The connect page says which token to create at the service, which permissions to tick and what expiry to choose, and the instance checks it with the service before storing anything. A token pasted by hand is a long-lived secret that acts as a person or a service account: its reach is what was ticked at the service, and removing the account here deletes nothing there (accepted risk A30 of the [threat model](https://github.com/vaubaan/gateway/blob/main/docs/handbook/threat-model.md#accepted-risks)).

After connecting, the owner labels resources with their environment (`staging`, `prod`) on the account's page, and can give access to a teammate or a team.

**No plugin has yet executed a tool against the real service it models**: every provider call of the test suites is answered by a double ([known limitations](/docs/known-limitations)).

## One page per service

The pages below are generated from each plugin's declaration — how it connects, what the connect page asks, the permissions to grant — and completed with the registration notes of the plugin's README.

## In this section

- [Connect Cloudflare DNS](/docs/providers/cloudflare-dns)
- [Connect Context7](/docs/providers/context7)
- [Connect Fly.io](/docs/providers/fly)
- [Connect GitHub](/docs/providers/github)
- [Connect Gmail](/docs/providers/gmail)
- [Connect Miro](/docs/providers/miro)
- [Connect Notion](/docs/providers/notion)
- [Connect Railway](/docs/providers/railway)
- [Connect Resend](/docs/providers/resend)
- [Connect SSH (bash)](/docs/providers/ssh)
- [Connect Stripe](/docs/providers/stripe)
- [Connect Supabase](/docs/providers/supabase)
- [Connect Upstash Redis](/docs/providers/upstash-redis)
- [Connect Vercel](/docs/providers/vercel)