Skip to content

Integrations Overview

Building an agent is half the job. This section covers the other half: putting agents and tools where your users already work.

All channels call the same runtime with the same per-user permission checks, so choosing a channel is a user-experience decision, not a security trade-off. See the Architecture overview for how the channels converge.

Every channel authenticates in one of two OAuth modes: user-initiated (the request runs as the signed-in person, with their permissions) or machine-to-machine (the request runs with the role assigned to the OAuth client). How you authenticate changes what you see explains the difference. Whichever channel you choose, built-in tool calls count toward the same usage metering.