Connecting apps
Connect the apps your company uses, such as Gmail, Slack, Linear, Google Drive or Notion, or your own MCP server. Connecting gives nobody access: each employee only gets the apps you give them.
- You are the company’s owner: only the owner connects apps.
- An account in the app you connect, or a key from it.
- Free includes 3 connected apps; the web browser and web search don’t count. Paid has no limit.
On this page
The Connections page#
At the top, four figures: Connected, Needs you (a connection whose access expired or that sent something with no confirmed outcome), Employees with access, and Writes today. Below them, each connection with who can use it, its last activity and its state.
Three ways to connect#
| Way | How it works |
|---|---|
| Sign in | You sign in on the app’s own page and allow access. Royak keeps a token that renews itself; when the app stops renewing it, the connection asks you to reconnect. |
| A key | You paste a key from the app into its form on Connections. Royak checks it with the app before saving, where the app allows that. |
| Your own server | Any MCP server, yours or an app’s, added by its address. See Add your own server below. |
Each app in Add an app says which it takes: “Sign in”, “Connects with a key”, “Sign in or paste a key”, “Built in: allow the sites it opens” for the web browser, or “Not available yet”.
Connect an app#
- 1
Find the app
On Connections, browse Add an app by group (Communication, Finance, Sales, Files, Engineering) or type in Search connections and apps.
- 2
Select Connect
An app that only signs in goes straight to its own sign-in page. Any other opens its panel: Sign in to {app}, or its key form with Check and connect.
- 3
Allow access
Sign in and approve on the app’s page. You come back to Connecting {app}… while Royak checks what employees could do in it.
- 4
Choose who can use it
The page says {app} is connected, lists what Employees can do (marked “asks you first” for writes) and offers Who can use it. Add the employees who need it.
If the sign-in fails, Couldn’t connect {app} says why (you declined, the link was incomplete, the session ended, or the app refused) with Try again.
Add your own server#
An app that isn’t listed may run its own MCP server, or your company may run one. Next to the app count in Add an app, select Add your own server.
- 1
Enter its address
Its MCP address, often ending in /mcp, and an optional Name.
- 2
Add a key, if it needs one
Tick It needs a key or token, paste it, and name the Header it goes in (Authorization sends it as a bearer token).
- 3
Check and add
Royak checks the server before saving anything. A server that signs in with OAuth sends you to its sign-in next.
| If the panel says… | Check |
|---|---|
| could not reach it | The address, and that the server is running and open to the internet. Royak can’t reach IP addresses or private networks. |
| did not answer in time | That it is running and not overloaded. |
| answered, but not as an MCP server | The path: you may have entered its website, not its MCP address. |
| sent Royak to another address | Use the final MCP address itself. |
| had an error | The server’s own logs. |
| needs a key, or did not accept this key | The key, and the header it goes in. |
| signs in in a way Royak cannot use | Paste a key or token from it instead. |
| lists no tools | Its setup: there is nothing for employees to use. |
Its tools work like any app’s: nobody can use them until you add them, and every tool that may change something waits for your approval.
A connection’s panel#
- Who can use it: each employee’s level, Add an employee, and remove. See Read, or Read and write.
- Standing approvals for the app’s writes. See Standing approvals.
- What this connection allows: every action found, as Read, Write · asks you, or Not allowed for an action Royak can’t check. Check tools looks again.
- Teams for Linear, or Destinations for other apps that have them: switches for where employees may work.
- Tasks using it, or Waiting on this while it isn’t connected.
- Recent activity: what it sent and how each send ended.
Some apps offer an add-on. Gmail’s Read your email adds four reads (search, read a message or thread, list labels) with an app password from your Google account; Remove takes them away.
Connection states#
| State | What to do |
|---|---|
| Connected | Nothing; it works. |
| Needs reconnecting | Access expired. Select Reconnect {app}; tasks that need it wait meanwhile. |
| Waiting for sign-in | Finish signing in with Continue in {app}. |
| Check what was sent | A write’s outcome is unknown. Check the app, then tell Royak with It happened or It did not happen (for Linear, Check Linear). It is never sent again. |
| Not working | Its server stopped answering; the panel says why and since when. Select Check again once it is back. |
| Disconnected | Kept while a task relies on it. Connect {app} again to use it. |
Questions#
Can my employees use an app as soon as I connect it?
No. Nobody can use it until you add them under Who can use it, and every write still waits for your approval.
Does Royak see my password?
No. Signing in happens on the app’s own page. Royak keeps only the access the app gives it, sealed, and never shows it to employees or AI models.
What happens when an app’s access expires?
The connection shows Needs reconnecting and tasks that need it wait. After Reconnect {app}, the page says how many waiting tasks can use it again.
The app I need isn’t listed. What now?
If it has an MCP server, add it with Add your own server. You can also ask us at support@royak.app.