Connectors
Connectors let Aperture reach external MCP servers and HTTP APIs through a single authenticated gateway. Aperture handles credential injection, request proxying, and access control, so agents interact with one proxy instead of managing individual service connections. Connectors complement providers: providers route model requests, and connectors route tool calls and API requests.
The MCP servers and HTTP APIs you connect to are third-party services. When Aperture forwards requests and credentials to them, their handling of that data is governed by your agreement with each service, not your agreement with Tailscale.
Set up connectors
Get started with connectors
Add a connector, grant access, and verify the connection in Aperture.
Add a verified connector
Configure a verified connector such as Salesforce or Slack from the Aperture connector picker, supplying OAuth client credentials when required.
Set up an authenticated MCP connector
Connect Aperture to an MCP server that requires authentication using a shared bearer token or OAuth 2.0 client credentials.
Set up an HTTP API connector
Configure Aperture to proxy requests to an upstream REST API with automatic credential injection.
Set up a per-user OAuth 2.0 connector
Connect Aperture to an external service that requires individual user consent using the OAuth 2.0 authorization code flow.
Grant access to MCP tools
Configure Aperture grants to control which connector capabilities users can access, including MCP tools, resources, templates, and HTTP proxy access.
Grant connector access by label
Label Aperture connectors and grant access by label so a single grant covers every connector in a group instead of naming each connector ID.
Built-in connectors
Set up the built-in Aperture connectors that provision tailnet nodes and run shell commands over Tailscale SSH.
Use connectors
Use a connector
Authorize a connector, discover and call its tools, and reconnect when access expires.
Understand connectors
How connectors work
Understand how Aperture connectors reach external MCP servers and HTTP APIs, how they relate to providers, and how authentication and access control apply.
Kinds of connector
Aperture has five kinds of tool integration. They differ by who runs the tool and who can reach it, which determines their configuration, grants, and failure behavior.
Reference
Aperture connectors reference
Complete reference for Aperture connectors, including field definitions, authentication types, MCP and HTTP protocol behavior, grants, dynamic registration through the legacy MCP section, and migration from the deprecated MCP servers syntax.