Integration & Setup Guides
Friction scores, unwritten failure modes, least-privilege scope mappings, and 1-click Composio AuthConfigs.
GitHub
Developer Tools
Zero review hurdles. Self-serve credentials and test tokens generated instantly in developer portal.
Instant 0-day approval. GitHub OAuth apps require no central manual review to serve external users, but enterprise teams strongly prefer GitHub Apps for fine-grained repository permissions.
Instant 0-day approval. GitHub OAuth apps require no central manual review to serve external users, but enterprise teams strongly prefer GitHub Apps for fine-grained repository permissions.
Traditional GitHub OAuth apps grant broad account-wide access (e.g. 'repo' scope grants read/write to ALL private repositories). For enterprise clients, use GitHub Apps instead to scope access to specific repositories.
Slack
Communication
Requires workspace admin authorization, granular scope permissions, or handling rigid token expiry.
Fast setup accelerated by Slack App Manifests. Public distribution across any workspace can be activated immediately without submitting to the Slack App Directory.
Fast setup accelerated by Slack App Manifests. Public distribution across any workspace can be activated immediately without submitting to the Slack App Directory.
Slack distinguishes between Bot Scopes (`chat:write`) and User Scopes (`chat:write.customize`). AI agents sending messages on behalf of a user need User scopes; agents posting as a bot persona need Bot scopes. Mixing them up causes authorization loops.
Google Workspace (Gmail & Drive)
Productivity
Strict review required: mandatory directory submission, CASA security audit, or developer verification.
The highest-friction OAuth ecosystem. Triggers mandatory multi-week human review, domain verification via Search Console, unlisted YouTube video demos, and potential third-party security audits (CASA) if requesting sensitive or restricted scopes.
The highest-friction OAuth ecosystem. Triggers mandatory multi-week human review, domain verification via Search Console, unlisted YouTube video demos, and potential third-party security audits (CASA) if requesting sensitive or restricted scopes.
If your Google Cloud OAuth app publishing status is kept in 'Testing' mode, refresh tokens SILENTLY EXPIRE after 7 days! Your AI agent's background jobs will abruptly fail every week. You must push to 'In Production' to get non-expiring refresh tokens.
Spotify
Media & Content
Strict review required: mandatory directory submission, CASA security audit, or developer verification.
Fast initial prototype, but throttled by a hard 25-user development limit. Scaling beyond 25 beta testers requires an opaque 'Quota Extension Request' that takes 2 to 4 weeks.
Fast initial prototype, but throttled by a hard 25-user development limit. Scaling beyond 25 beta testers requires an opaque 'Quota Extension Request' that takes 2 to 4 weeks.
In Development mode, Spotify blocks any user whose email is not manually entered in the Developer Dashboard User Management tab. User #26 receives an immediate `User not registered on developer dashboard` error.
Linear
Productivity
Zero review hurdles. Self-serve credentials and test tokens generated instantly in developer portal.
Exceptionally developer-friendly. Instant internal workspace authorization, strict PKCE enforcement, and actor-scoped tokens with zero wait times for custom integrations.
Exceptionally developer-friendly. Instant internal workspace authorization, strict PKCE enforcement, and actor-scoped tokens with zero wait times for custom integrations.
Linear supports actor scoping: actions can be attributed either to the user who authorized the app or to the application bot itself.
Notion
Productivity
Requires workspace admin authorization, granular scope permissions, or handling rigid token expiry.
Instant internal workspace access with zero wait times. Public integrations require developer portal distribution approval with a privacy policy and terms of service.
Instant internal workspace access with zero wait times. Public integrations require developer portal distribution approval with a privacy policy and terms of service.
Unlike platforms that grant broad workspace access, Notion users must explicitly select which pages/databases the integration can access during the OAuth consent popup. If the user doesn't check a page, the agent receives empty search results.
Salesforce
CRM & Sales
Strict review required: mandatory directory submission, CASA security audit, or developer verification.
Enterprise Connected App architecture. Immediate developer org usage, but requires careful handling of cluster replication delays and IP relaxation policies.
Enterprise Connected App architecture. Immediate developer org usage, but requires careful handling of cluster replication delays and IP relaxation policies.
For 2 to 10 minutes after saving a Connected App, all OAuth requests fail with 'invalid_client_id' while Salesforce replicates credentials across clusters. Developers frequently waste hours debugging code that isn't broken.