Where to find integrations
Go to Settings → Integrations. This tab lets you connect third-party tools — things like GitHub, Notion, Slack, Google Workspace, Microsoft 365, Stripe, HubSpot, and more — so Aiybiz agents can act on them on your behalf.Connecting a tool
Under Connected integrations you’ll find every tool your company has already connected, with its status and last use. Below that, a searchable list shows every connectable tool. Search or scroll to find the one you need, then click it to open the connect dialog:1
Review what it enables
The dialog shows a short description of the tool and the list of actions your agents will be able to perform, each tagged read or write.
2
Get your credential
Follow the step-by-step instructions shown in the dialog to obtain an API key (or continue through OAuth for tools that support it).
3
Connect
Paste the key (or complete the OAuth flow) and confirm. The tool is now connected and ready to be granted to agents.
Requesting a new integration
Don’t see the tool you need? Request an integration always appears at the bottom of the connector list (and on its own if your search doesn’t match anything). Type the name of the tool and submit — the Aiybiz team reviews all requests and prioritizes based on demand.Security
Agents never have access to your secret keys — ever. That’s the core guarantee behind every integration.No agent, prompt, tool output, log, or conversation can expose your API key or OAuth token. The key exists in exactly one place: encrypted in Aiybiz’s database.
1
You paste the key once
The moment you submit it in the connect dialog, your key is encrypted at rest. It is never stored, logged, or displayed in plain text again — not even to you.
2
The agent only ever sees an action name
When an agent wants to use a connected tool, it calls an action like “create issue” or “send message” — it never handles, requests, or has any way to read the underlying credential.
3
The platform injects the key server-side
Aiybiz’s backend decrypts your key on its own servers, attaches it to the outgoing API request to the third-party tool (GitHub, Slack, Stripe, etc.), and discards the decrypted value immediately after. The key never passes through the agent’s context, memory, or output.
4
Every call is audited
Each action an agent performs through a connection is logged — which agent, which action, when. You decide exactly which actions (read and/or write) each agent may use, per connection.