Connected-app catalog
The Composio-backed catalog is available in Personal Space using its owner’s encrypted, write-only app-service key. Without the key, connected apps stay off while chat remains usable.
Remote MCP servers
Manage MCP servers offers OAuth, bearer token, API key, or no authentication, depending on the server. The quick-add Integrations form does not offer OAuth. Adding a server does not automatically enable it for every bee.
Review sources and accounts
Confirm who operates the service, where its credentials and data are handled, and which account is connected. Third-party catalog coverage is not proof that every action is enabled.
Respect outside-content restrictions
External messages and other untrusted inputs can restrict tool access. Composio actions cannot receive a routine-wide or bot-wide advance allowance because they lack a stable account identity for that permission.