Custom Connections
Learn how Giga can connect to services that need MCP, OAuth, API credentials, or browser-based access.
Giga can connect to tools beyond the standard integration catalog through Custom Connections.
Use a Custom Connection when the service you need is not already available through a built-in Connection, or when your company needs to use its own MCP server, OAuth setup, API credentials, or browser-based access.
Start by checking for an existing integration
Before creating something custom, Giga should check whether the product is already available in the integration catalog.
If it already exists, use the existing integration and its supported connection methods instead of creating a duplicate.
Use the existing integration when one already exists
Custom Connections are for genuinely new or specialized connection needs, not a second copy of an integration Giga already knows about.
Custom Connection options
MCP
Connect a compatible MCP server and expose its tools to Giga.
OAuth
Use an OAuth-based connection when the service supports the required authorization flow.
API keys
Connect services that authenticate with an API key or personal access token.
Browser connections
Use a browser session when the task requires direct interaction with a website.
How Giga chooses a connection path
For a new integration, Giga should prefer the strongest self-serve option the service actually supports.
- MCP
- OAuth with a supported self-serve flow
- API key or PAT
- Browser login
The connection method should come from the service’s real capabilities, not from guesswork.
| Method | Good fit when… |
|---|---|
| MCP | The service exposes an MCP server that Giga can connect to |
| OAuth | The service supports delegated account access through an OAuth flow Giga can use |
| API key / PAT | The service exposes an API and authenticates with a user-provided credential |
| Browser session | Direct website interaction is required and another connection method cannot complete the task |
Custom Connections still use secure setup
A Custom Connection should not require you to paste secrets into a normal Chat.
If the connection needs an API key, token, password, client credential, or other secret, Giga should route you through the secure connection setup.
Keep secrets out of Chat
Custom does not mean manual secret handling. Passwords, tokens, API keys, OAuth secrets, and connection strings should stay inside Giga’s secure connection flow.
What Giga checks before creating a custom integration
When the product is not already in the catalog, Giga should first understand how that service actually connects.
That includes checking:
- the official product or service
- which connection methods it supports
- whether an MCP server exists
- whether OAuth supports a self-serve setup
- whether an API key or PAT is available
- whether browser login is the only practical route
Giga should avoid promising that a service can be connected until it has verified a workable path.
Workspace-specific integrations
When supported, Giga can create a new integration that is private to the current workspace.
This is useful for:
- niche SaaS tools
- internal company systems
- private MCP servers
- tools that have not been added to the main integration catalog yet
Once created, the integration can have its own secure connection flow based on the mechanisms the service actually supports.
Image placeholder
Flow diagram showing: check catalog → choose MCP / OAuth / API key / Browser → secure setup → Connection available in Giga.
Custom does not change permissions
A Custom Connection still follows Giga’s permission model.
Giga should check:
- who owns the underlying credential
- whether the Connection is shared into a Group
- which users or Agents can access it
- what the external service itself allows
- which actions are available in the current session
Learn about Sharing Connections →
Which option should you use?
Use MCP
Best when the service already exposes a compatible MCP server.
Use OAuth
Best when delegated user access is supported through a compatible OAuth flow.
Use an API key
Best when the service provides a direct API and user-managed credential.
Use the browser
Best when direct website interaction is required and no stronger connection path can do the job.