Connected Apps

Connected Apps let you securely link outside tools (starting with Gmail, Google Drive, Slack and more) so your Chief of Staff can search and cite them alongside your workspace data. Connect an account once and its items are indexed for fast, permission-aware recall; Chief answers with a link straight back to the original.

• Your data stays yours, a personal connection (e.g. your own mailbox) is indexed privately: only YOU can recall it through Chief. Nobody else in your workspace (not even an admin) sees your private connected items. Shared/org connections are visible to the whole team. This per-user fence is enforced in the database, not just the UI.
• Secure by design: access tokens are stored in a secret-isolated table with no client access (service-side only), every read is RLS + role-checked, and connecting is gated per role under Settings ▸ Roles (the /connectors CRUD matrix) and by your plan.
• Write-back is approve-first, the Outbox on Connected Apps lets you (or Chief) draft an email or Slack message, but nothing leaves your workspace until an owner/admin approves it. Sends are capped per hour, every attempt is logged with its result, and the whole lane sits behind a per-app platform kill-switch.

• Connecting: open Connected Apps, choose whether the connection is “Only me” (private) or “Whole team”, then click Connect and approve access in the provider’s window. Disconnect any time from the list (that also removes its synced items).
• Admins: under Provider setup (platform admins only) paste each app’s OAuth client id and secret, set the redirect URI and scopes, and enable it. Secrets are stored server-side and are never shown back.