Skip to content

Configure external tools in Studio

Open Administration, then External tools to manage a connection and its project permissions. Follow the GitHub setup below, or inspect the requirements for another provider.

Screenshots use controlled fixtures.1 Select an image to open the full capture; its theme follows the page appearance.

External tools catalogExternal tools catalog

Fixture catalog, initial view. GitHub has a configuration flow; the other cards lead to their current setup requirements. Scroll the catalog for the remaining providers.

Connect GitHub to a project repository

A factory administrator configures the platform key and project grants. A project owner cannot change those settings. The worker also needs the external_mcp role permission in Agents & skills; direct Codex and Claude CLI tools use their own permissions.

1. Save the connection

Enter an authorized GitHub key and choose whether to enable the connection. Saving contacts your factory API. Leave a saved key blank to preserve it; the page never reads its value back.

GitHub connection formGitHub connection form

Fixture connection form with a masked key. Save connection and continue records the configuration; discovery is a separate action.

2. Request discovery explicitly

Discover schemas sends a remote request on your factory and may consume provider quota. Inspect the saved connection first, then start discovery when you are ready to review its result. Discovery does not execute a repository tool.

Explicit GitHub schema discoveryExplicit GitHub schema discovery

Fixture discovery step before the request. The key is configured and the connection is enabled; no live tool execution is verified.

3. Review the returned tools

Choose the read tools the project needs and inspect their parameters. Copy the exact digest or open its identity disclosure when comparing schema revisions. A changed schema needs a new discovery and review.

Initial GitHub schema reviewInitial GitHub schema review

Fixture review overview after discovery. Nothing is selected yet. Use the visible field scrollbar to inspect the remaining tools before acknowledging this selection.

4. Grant the repository and roles

Choose a product project and one of its registered HTTPS GitHub repositories. Select the reviewed tools and implementation roles, then record the grant. Keep one current-key grant for each repository and tool, with all intended roles in that grant. To change an overlapping grant, revoke it explicitly and create its replacement.

Project repository grantProject repository grant

Fixture project-access step with Stock API selected. The server derives the allowed GitHub owner and repository from that registered source.

Rotating the key requires discovery and review before new grants. Existing frozen runs retain their recorded grant and key revision only while that grant is active and the connection is enabled. Removing the active key disables the connection and revokes its grants. If a save outcome is unknown, reload the factory state before another change.

See external tool authority and API contracts for the exact discovery, review and grant boundaries.

Inspect another provider's requirements

Each provider has its own Requirements, Account & scope (or Runner profile), Factory setup and Availability views. Continue moves through the guide; it does not verify an account or enable a template.

Figma

Figma requires allowed-client approval or waitlist admission and authorized OAuth for the intended files. A factory adapter is still required; this guide has no token or OAuth form.

Figma setup requirements on a phoneFigma setup requirements on a phone

Allowed-client, OAuth and project-file requirements remain separate. The fixture reports Prerequisite required.

Read the Figma prerequisite checklist for provider access and factory admission.

Sentry

The upstream service uses Sentry-Bearer authentication and can enrich issue results. A reviewed project adapter and server skill constraints are still required before this factory can admit those calls.

Sentry setup requirements on a phoneSentry setup requirements on a phone

Account and project requirements in the fixture. This view does not accept a token or admit issue enrichment.

Read the Sentry prerequisite checklist for provider access and factory admission.

Grafana

Prepare an approved managed HTTPS service with read-only server settings and a scoped service account. The factory still needs a reviewed adapter; an arbitrary endpoint cannot be added here.

Grafana setup requirements on a phoneGrafana setup requirements on a phone

Server, target identity and project data requirements in the fixture. The current template remains unavailable.

Read the Grafana prerequisite checklist for provider access and factory admission.

Playwright

Use the native BrowserRunner for isolated browser checks. Configure its pinned Docker image, matching browser package and declared loopback origin, then grant the required browser role and inspect actual worker evidence.

Playwright setup requirements on a phonePlaywright setup requirements on a phone

Native runner-profile requirements in the fixture. This guide does not save runner settings or launch an external stdio service.

Follow native browser setup and runner configuration before checking a real worker.

Keep the walkthrough current

The capture inventory binds each image to its actual viewport, Studio version, frontend source and capture producer. It also records the shared capture helpers and browser configuration, including native scrollbar painting. Refresh the complete inventory after a frontend change; the strict build rejects missing inputs and mixed capture versions. Follow the capture maintenance procedure.


  1. These screenshots use controlled API fixtures for the frozen Studio source recorded in the inventory. Keys are synthetic, and the projects, schema responses and grant records are fixtures. No model, hosted provider, remote repository or account-verification request runs. The images demonstrate navigation and presentation, not authenticated vendor access or actual tool execution. ↩