Connected apps

Open Connected apps from the sidebar, choose a service, and complete its authorization in your normal browser. HydroBot turns the resulting connection into tools that supported agent engines can use.

Official packaged app

The signed desktop app registers its own installation with HydroBot's managed connected-apps service. You do not need to find or paste a Composio key.

1. Open Connected apps.
2. Search for Gmail, GitHub, Slack, Notion, or another toolkit.
3. Select Connect.
4. Finish OAuth in the browser window that opens.
5. Return to the app and ask a bot to use the service.

The installation identity is stored using Electron's operating-system-backed secure storage. Provider OAuth tokens remain with Composio and are not written into bot prompts or the renderer.

Self-hosted or source builds

The managed service is a convenience for official packaged builds. A source build can use your own Composio project and COMPOSIO_API_KEY; see Self-hosted Composio.

You can also use your own Composio project in the packaged app. Open App Settings → Connections → Self-host connected apps and paste its project key. A saved project key takes priority over the managed service for the marketplace, connection management, and bot tools. Clear the key to return to the managed service.

Connect X (Twitter)

Composio does not provide managed credentials for its twitter toolkit. To connect an X account:

1. Create an app in the X Developer Portal.
2. Create a twitter auth config in your Composio project using that app's credentials.
3. Save the project's key under Self-host connected apps.
4. Return to Connected apps and connect X (Twitter).

The official managed HydroBot service keeps X disabled until it owns an appropriate X OAuth app. Older HydroBot tasks that refer to the connector as x continue to work; HydroBot translates that alias to Composio's twitter toolkit automatically.

Multiple accounts

Connect more than one account for the same toolkit and give each a clear alias such as work, personal, or client-acme. When several accounts could perform an action, HydroBot requires explicit selection instead of silently replacing the first connection.

Limit which tools a bot may use

Connecting a service makes its tools available to the workspace; it does not hand every bot every tool. Open a bot's settings on the desktop and, under Connected apps, choose per service whether that bot gets all tools, an exact list of tools, or no tools.

By default every bot keeps all tools on the apps it can see — nothing changes when you upgrade or connect a new app until you assign a grant. Once a bot has any grant, services missing from its list grant it nothing. Imported bots and shareable packages always land with no grants.

Phones show each bot's grants read-only in its profile under App tools. Editing happens on the computer; a paired phone can never change grants.

Disconnecting

Disconnecting an account revokes the upstream grant. It does not only hide the account in the local UI. Other accounts for the same toolkit remain connected.