App configuration
Configure installed apps, OAuth credentials, and managed connections for workspace builders.
App configuration controls which external systems users can connect to and which shared accounts are available for workflows and agents.
Open Admin Panel → Apps, OAuth Config, or Connections under App Configuration.
The admin app model
| Admin area | What it controls |
|---|---|
| Apps | Which apps are installed or available in the workspace |
| OAuth Config | App-level OAuth credentials used when users connect their own accounts |
| Connections | Managed connections that administrators configure and share |
| MCP Servers | Tool servers available from the MCP page |
| External Agents | A2A or external agent integrations when enabled |
This page focuses on Apps, OAuth Config, and managed Connections.
Configure an app for users
Open Apps
In Admin Panel, go to App Configuration → Apps. Confirm the app is installed or available.
Configure OAuth if needed
Go to OAuth Config when an app requires OAuth client credentials. Add the provider details from the external service.
Create managed connections when appropriate
Go to Connections to create a managed account that users can select in workflows or agents.
App Configuration covers installed apps, OAuth credentials, and managed app accounts. Test as a builder
Open Apps as a normal user and confirm the app appears in Connect Your Accounts or Managed Connections as intended.
OAuth config vs managed connection
| Need | Configure |
|---|---|
| Users should sign in with their own account | OAuth Config, then users connect from Apps |
| Workflows should use one shared service account | Connections as a managed connection |
| A team should not see or use an app | Do not grant or expose the app to that workspace |
Managed connection governance
Before creating a managed connection, decide:
- Which workspace or team can use it?
- Which external account should be connected?
- Who owns the external account?
- What workflows or agents depend on it?
- How will it be rotated if the credential expires?
Managed connections are powerful because they let production workflows avoid depending on one user's personal account.
User-facing effect
After admin configuration:
- Users see normal app cards under Apps.
- OAuth apps open a sign-in flow when users click Add New Connection.
- Managed connections appear under Managed Connections and can be selected in workflow or agent fields.