Skip to main content

Smart Connections

Smart Connections allow Arrotech Hub to securely act on your behalf across third-party platforms like Slack, HubSpot, and Zoho. We handle the complexity of OAuth flows, token refreshes, and credential encryption.

How it works: The OAuth Flow​

Arrotech Hub uses standard OAuth 2.0 protocols to establish secure, scoped access to your tools:

sequenceDiagram
    participant User as You
    participant Hub as Arrotech Hub
    participant App as External App (e.g. Slack)

    User->>Hub: Click "Connect Slack"
    Hub->>App: Redirect with Client ID & Scopes
    App->>User: Request Permissions
    User->>App: "Allow"
    App->>Hub: Return Authorization Code
    Hub->>App: Exchange Code for Access Token
    App-->>Hub: Access & Refresh Tokens
    Hub->>Hub: Encrypt & Store Tokens

Platform Registry​

Our platform registry is a centralized catalog of supported integrations. Each platform in the registry defines:

  • Auth Strategy: OAuth 2.0, API Key, or Basic Auth.
  • Config Schema: A dynamic JSON schema used to validate your setup.
  • Tool Mapping: How Arrotech's internal logic translates to the platform's API endpoints.

Security & Encryption​

Maintaining the trust of your integrations is our highest priority:

  1. Encryption at Rest: All tokens are encrypted using AES-256 before hitting our database.
  2. Secret Injection: Your tokens are only decrypted in memory during the brief moment an MCP Tool is being executed.
  3. Scoped Tokens: We only request the minimum permissions (scopes) necessary for the tool to function.

Supported Platforms​

  • Communication: Slack, WhatsApp, Microsoft Teams, Zoom.
  • CRM: HubSpot, Zoho, Salesforce.
  • Operations: Asana, Airtable, PowerBI, Xero.

Learn More​