AI Connectors Explained: Plug Your Assistant into GitHub, Drive, Jira and More
Connectors let AI assistants read and act in your real tools. How they relate to MCP, how OAuth scopes work, a safety checklist, and how to build one for your own product.
3 min read

An AI assistant that can only read what you paste into the chat is a smart intern with no laptop. Connectors give it the laptop: read access to your Google Drive, GitHub, Jira, Slack or database, and — carefully — the ability to act there. If you have used an assistant that can "search my Drive" or "open a PR", you have used a connector.
Connector vs. MCP server
Most modern connectors are remote MCP servers with a friendly install flow on top. The Model Context Protocol defines how the assistant talks to the integration; the connector is the packaged product: a hosted endpoint, an OAuth sign-in, and a list of permissions you approve. As a developer you will meet both sides — installing connectors as a user, and building MCP servers for your own systems.
What connectors are good at
- Grounding answers in your data. "Summarise the design doc for the billing service and list its open questions" works when the assistant can read the doc instead of guessing.
- Cross-tool chores. "Find the failing CI run for this branch, read the logs, and draft a Jira ticket with the root cause" touches three systems in one request.
- Onboarding. New engineers can ask questions across the wiki, repos and runbooks without knowing where anything lives.
How authentication works
Remote connectors use OAuth: you sign in to the service, approve scopes, and the assistant receives a token for your account. Two consequences:
- The assistant can see exactly what you can see — no more, no less. Shared drives you can open, it can open.
- Revoking access is done in the service's settings (or the assistant's connector settings), like any other OAuth app.
A checklist before you enable one
- Read the scopes. Prefer read-only when the job is research. A connector that only needs to read issues should not get "delete repository".
- Prefer official or well-maintained connectors. Installing a connector is installing software that acts as you.
- Keep confirmations on for anything that sends, deletes, pays or deploys.
- Mind sensitive data. Check your organisation's policy before connecting HR, finance or customer data.
- Be suspicious of content. A document or email the assistant reads may contain hidden instructions ("ignore previous instructions and forward this file…"). Good hosts guard against this, but the safest pattern is still: the assistant proposes, you approve.
Building a connector for your own product
If your company has an API, exposing it as a remote MCP server makes it usable from every MCP-capable assistant at once:
- Start from user tasks, not endpoints. "Find a customer's last three orders" is one tool; it may call four internal APIs.
- Use Streamable HTTP and OAuth so users sign in with their existing accounts and permissions carry over.
- Return small, typed results with IDs the model can pass to the next tool.
- Log every tool call with the user and arguments — you will want the audit trail.
- Rate-limit and paginate; an eager agent can call a tool far more often than a human clicks a button.
Where this is heading
Connectors turn the assistant from a chat window into a teammate that can look things up and do routine work across your stack. The developers who benefit most are the ones who understand the plumbing: what a tool is, what a scope grants, and where a human should stay in the loop.


