Users connect their accounts in one click
An embeddable widget for user-authorized access. You render the widget, the user authorizes, and the token lands in the vault under your branding.
Your OAuth apps, your branding
The widget runs the authorization flow against OAuth apps you own, so consent screens carry your name, not ours.
Runs the whole OAuth flow
PKCE, state validation, and token exchange are done for you. Desktop gets a popup, mobile gets full-page navigation, and completion messages are validated before your callback fires.
Tokens go straight to the vault
The credential lands encrypted in the vault, tied to the user who granted it. Your frontend and backend never see it.
Drop-in support for 70 OAuth providers
Drop in the Connect widget and users authorize Google, Slack, GitHub, or any provider you enable. The session is minted by your backend with the providers and origin you allow, so the widget can only do what you configured.
- Session tokens are short-lived and origin-bound
- Typed completion callbacks, validated before they fire
- Available on npm as @alter-ai/connect, or via CDN bundle
Users see what they grant
The hosted consent screen shows the user what access is being requested before they approve it, and includes a policy-authoring surface for bounding the grant. Every grant then shows up in the user's Wallet, where it can be revoked at any time.
- Consent screens list the requested provider and scopes
- Grants are owned by the user who made them
- Revocation from the Wallet takes effect immediately
Consent
Acme Scheduler wants to access
Google Calendar · calendar.readonly
Revocable anytime from the Wallet
Ready to secure your agents?
Book a 30-minute walkthrough with the founders.