Connected accounts: OAuth 2.0 grants held for venue users so agents can call a provider's API as the user — connect, check status, disconnect — with access tokens reaching only the HTTP adapter (bearerSecret "oauth/<provider>"), never a model.
| Name: | oauth |
| Class: | covia.adapter.OAuthAdapter |
This adapter provides 3 MCP tool(s) for AI agent integration:
| Tool Name | Description |
|---|---|
| oauth_connect | Starts connecting the caller's account at an OAuth provider (google, microsoft, github, or any provider the operator configured). Returns the URL the user must open and approve; the provider then calls the venue back and the grant is stored for the caller. Nothing is connected until the user approves. Afterwards, call the provider's API with http:get / http:post and bearerSecret "oauth/<provider>" — the access token never appears in your context. |
| oauth_disconnect | Forgets the caller's grant for a provider and, where the provider supports revocation, revokes it there too. Only when the user asks to disconnect. |
| oauth_status | The caller's connected accounts — provider, granted scope, whether the grant can refresh itself, when it was obtained and when the current access token expires. Never the tokens. |