ConnectOverview

Pipedream Connect

Connect provides a developer toolkit that lets you add 2,500+ integrations to your app or AI agent. You can build AI agents, in-app messaging, CRM syncs, and much more, all in a few minutes. You have full, code-level control over how these integrations work in your app. You handle your product, Pipedream simplifies the integration.

Connect visualization

Use managed auth

  • Handle authorization or accept API keys on behalf of your users, for any of Pipedream’s 2,500+ APIs
  • Use the Client SDK or Connect Link to accept auth in minutes
  • Ship new integrations quickly with Pipedream’s approved OAuth clients, or use your own

Act on behalf of your users

Use cases

Pipedream Connect lets you build any API integration into your product in minutes. Our customers build:

  • AI products: Talk to any AI API or LLM, interacting with your users or running AI-driven asynchronous tasks
  • In-app messaging: Send messages to Slack, Discord, Microsoft Teams, or any app directly from your product.
  • CRM syncs: Sync data between your app and Salesforce, HubSpot, or any CRM
  • Spreadsheet integrations: Sync data between your app and Google Sheets, Airtable, or any spreadsheet

and much more.

Getting started

Visit the managed auth quickstart to build your first integration.

Plans and pricing

Managed authentication with Connect is free to use for up to 1,000 connected accounts for any workspace. Check out our pricing page to get in touch with our Sales team for details on using the rest of the Connect features in production.

Security

Pipedream takes the security of our products seriously. See details on Connect security and our general security docs. Please send us any questions or suspected vulnerabilities. You can also get a copy of our SOC 2 Type 2 report, sign HIPAA BAAs, and get information on other practices and controls.

Storing user credentials, token refresh

All credentials and tokens are sent to Pipedream securely over HTTPS, and encrypted at rest. See our security docs on credentials for more information.

How to secure your Connect apps

  • Secure all secrets — Secure your Pipedream OAuth client credentials, and especially any user credentials. Never expose secrets in your client-side code. Make all requests to Pipedream’s API and third-party APIs from your server-side code.
  • Use HTTPS — Always use HTTPS to secure your connections between your client and server. Requests to Pipedream’s API will be automatically redirected to HTTPS.
  • Use secure, session-based auth between your client and server — authorize all requests from your client to your server using a secure, session-based auth mechanism. Use well-known identity providers with services like Clerk, Firebase, or Auth0 to securely generate and validate authentication tokens. The same follows for Pipedream workflows — if you trigger Pipedream workflows from your client or server, validate all requests in the workflow before executing workflow code.
  • Secure your workflows — See our standard security practices for recommendations on securing your Pipedream workflows.

Glossary of terms

  • App: GitHub, Notion, Slack, Google Sheets, and more. The app is the API you want your users to connect to in your product. See the full list here.
  • Developer: This is probably you, the Pipedream customer who’s developing an app and wants to use Connect to make API requests on behalf of your end users.
  • End User: Your customer or user, whose data you want to access on their behalf. End users are identifed via the external_user_id param in the Connect SDK and API.
  • Connected Account: The account your end user connects. Read more about connected accounts.
  • OAuth Client: This is admittedly a bit of an overloaded term and refers both to custom OAuth clients you create in Pipedream to use when your end users authorize access to their account, as well as OAuth clients to authenticate to Pipedream’s API.