AgentConnect deployment settings
Saved settings take effect after the stack is restarted.
Startup environment
Public service URLs come from .env. Provider callbacks below are derived from these values.
Logto
Authentication and administrator access.
- Management endpoint
Not configuredstartup environment- Management App ID
Not configured- Management API resource
Not configured- Management App secret
- Not configured
- Sign-in endpoint
Not configuredstartup environment- SPA App ID
Not configured- Browser API resource
Not configured
Edit Logto configuration
Checking redirects and sign-in settings…
Providers
GitHub
Repository integration and optional Logto sign-in.
- App ID
Not configured- App slug
Not configured- Client ID
Not configured- Webhook delivery
Not configured- Client secret
- Not configured
- Private key
- Not configured
- Webhook secret
- Not configured
- Logto connector secret
- Not configured
Edit GitHub App identity
GitLab
OAuth application used to administer projects on this deployment's GitLab instance.
- Instance
https://gitlab.com- Application ID
Not configured- Secret
- Not configured
Redirect URI:
Scopes:
GitLab does not expose OAuth application creation through an API. In User settings → Applications, or a group's Settings → Applications, add an application whose redirect URI is exactly the value above, keep Confidential selected, grant the scopes above, then save the generated Application ID and Secret here. GitLab shows the secret only once.
Use your own user applications unless you are an instance administrator registering one application for everyone; an instance-wide application lives in the Admin area instead.
Creating each agent's bot account later needs authority this page cannot verify — no GitLab API reports it: either connect an instance administrator (whose API token cannot act as one while Admin Mode is enabled), or, on Premium and Ultimate, turn on Admin → Settings → General → Account and limit → “Allow top-level group Owners to create service accounts”.
Gitea
The Gitea instance this deployment addresses. Gitea registers no application, so the address is the whole setting.
- Instance
https://gitea.com
Each organization connects Gitea by pasting the personal access token of a bot user it created, in the console — nothing about that identity is a deployment setting. Gitea 1.23 or later, or Forgejo 15 or later, is required, and the address is checked against that floor when it is saved.
Leave the field empty for gitea.com. A self-hosted instance under a path prefix keeps the prefix. A Forgejo instance, Codeberg included, is entered the same way.
Slack
One App for workspace integration and Logto sign-in.
- App ID
Not configured- Client ID
Not configured- Client secret
- Not configured
- Signing secret
- Not configured
- Logto sign-in
- Not configured
Edit Slack App identity
Linear
One OAuth application for the whole deployment. Every workspace connects through it.
- Client ID
Not configured- Client secret
- Not configured
- Webhook signing secret
- Not configured
Callback URL:
Webhook URL:
Linear does not expose OAuth application creation through an API. In Settings → API → OAuth applications, create one application under the product's own name and icon, add the callback URL above, then save its Client ID, Client secret, and webhook signing secret here.
On the same application, enable webhooks, point them at the webhook URL above, and check the Agent session events category.
Until that category is enabled, agent sessions are disabled for the whole application: delegating an issue only sets the delegate badge and no session is created. Enabling it later raises a new scope, so every already-connected workspace must reconnect before webhooks arrive.
OAuth client used by the Logto Google connector.
- Client ID
Not configured- Client secret
- Not configured
Authorized JavaScript origin:
Authorized redirect URIs:
Google does not expose OAuth client redirect settings through an API. Copy these required values into Google Auth Platform; Setup can verify only the Logto connector.
Google Chat
One Chat app for the deployment. Each Google Workspace organization connects itself from Google Chat.
- Project ID
Not configured- Project number
Not configured- Service-account key
- Not configured
HTTP endpoint URL:
- Use a Google Workspace account that may create a Cloud project and service-account keys. An organization policy can block key creation.
- Create a Google Cloud project for this app and enable the Google Chat API in it.
- On the Chat API Configuration page, build the app as a Google Workspace add-on, the default for a new app (convert an existing app first). Under Connection settings choose HTTP endpoint URL, use one URL for all triggers, and enter the URL above. Allow 1:1 messages and joining spaces, and choose who can use the app.
- Under Commands, add a slash command named /help with the description "Show how to use this app" and command ID 1; any free ID works, since AgentConnect matches the name.
- In the same project, create a service account and a JSON key for it, grant it the Browser role on the project, and enable the Cloud Resource Manager API; AgentConnect reads the project number with that key.
- Save the project ID and key here. The project number is optional: it is on the project's settings page and in the add-on's service account email, service-PROJECT_NUMBER@gcp-sa-gsuiteaddons.iam.gserviceaccount.com. When entered, it must match the number read from the key's project.
- Configure Google sign-in above, then add the app in Google Chat and send it a message. Each Google Workspace organization connects itself from Google Chat by signing in to the console with Google; publish the app on the Google Workspace Marketplace to reach other organizations.
Edit Google Chat App identity
Feishu
Matches the Logto OAuth 2.0 connector named Feishu, OAuth callbacks, and published App setup.
- App ID
Not configured- App secret
- Not configured
Lark
Matches the Logto OAuth 2.0 connector named Lark, OAuth callbacks, and published App setup.
- App ID
Not configured- App secret
- Not configured