Integrations

Matrix OS connects to external services through secure OAuth flows. You authorize once, then Matrix can help read, search, draft, organize, schedule, post, and summarize through connected services.

You do not need to manage API keys or developer credentials. Connect the service, then ask Matrix for the result you want.

Available Services

Connecting a Service

There are two ways to connect:

From Settings

Open Settings > Integrations. You'll see all available services with a Connect button. Click it, authorize in the popup, and the connection appears automatically.

From Conversation

Tell your agent what you need:

"Connect my Gmail"

The agent will give you an authorization link. Click it, authorize, done. The agent confirms once the connection is active.

You can also label connections for multiple accounts:

"Connect my work Gmail as Work Gmail"

Using Connected Services

Once connected, just ask naturally:

"What are my unread emails?" "Create a meeting with Alice tomorrow at 3pm" "Post 'deploy complete' to #engineering in Slack" "List my open GitHub issues in myorg/myrepo"

Service Actions Reference

Gmail

Optional params: query (Gmail search syntax like is:unread, from:alice), maxResults, cc.

List/search and history calls accept pageToken. Pass the returned nextPageToken unchanged to read the next page while keeping the same filters. Gmail pages allow 1–500 results. Keep startHistoryId as a string: converting it to a JavaScript number can lose precision. Expired history IDs require a full resync, not an empty successful import.

For modify_message, use addLabelIds and/or removeLabelIds. Removing INBOX archives one message; removing UNREAD marks it read. Label creation and message changes are write actions covered by native agent approval. Empty, duplicate, conflicting, and TRASH label changes are rejected. No batch deletion is provided.

Google Calendar

Date params use ISO 8601 format: 2026-04-06T09:00:00Z.

Google Drive

GitHub

Slack

Discord

Granola

Granola connects through its official MCP endpoint and browser OAuth. Matrix registers a public OAuth client automatically, so you do not need an API key or developer credentials. Matrix shows only the actions supported by your connection; some search, folder, and transcript capabilities depend on your Granola plan and workspace access.

X

X connects through managed browser OAuth and the official X API v2, so you do not need an API key or developer credentials. Usernames contain up to 15 letters, numbers, or underscores and should be passed without @. Keep user and post IDs as strings so they do not lose precision.

list_user_posts accepts maxResults from 5–100. Recent search accepts 10–100 results per request; pass the returned nextToken unchanged to continue the same query. X may further limit results and publishing based on the connected account's API access.

Posts and replies require native agent approval before Matrix sends them. This integration does not expose direct messages, follows, likes, reposts, or deletion.

Reading Beyond the First Page

• Calendar and Drive accept pageToken; continue with nextPageToken. Drive also returns incompleteSearch, which must not be treated as a complete search.
• GitHub repository, issue, pull-request, and notification lists accept page and per_page. Link response headers are not exposed by this increment; continue numbered pages until an empty page rather than assuming one page is all results.
• Slack channel/message lists accept cursor; continue with response_metadata.next_cursor. Slack search uses page and count.
• Discord server/message lists accept either before or after, plus limit. Keep these IDs as strings, not JavaScript numbers.
• X recent search accepts nextToken; pass the returned token unchanged with the same query to continue beyond the first page.

Service actions return one provider page. Your app or worker must retain its filters and checkpoint progress. Pipedream action/account discovery separately walks SDK pages with limits of 20 pages, 2,000 entries, 10 seconds per request, and a shared 30-second deadline. A later-page failure or exceeded bound rejects the inventory; it is not reported as a complete partial list. Account discovery does not request credentials.

Multiple Accounts

You can connect multiple accounts for the same service. For example, a Work Gmail and a Personal Gmail. Use labels to differentiate:

"Send from my Work Gmail: email alice@company.com about the Q2 report"

The agent uses the label parameter to target the right account. If no label is specified, the most recently connected account is used.

Managing Connections

View connections

"What services are connected?"

Or open Settings > Integrations to see all active connections with status indicators.

Disconnect a service

"Disconnect my GitHub"

Or click Disconnect in Settings. This revokes the connection's OAuth credentials when the provider supports revocation and removes the connection from your account.

Building Apps with Integrations

Apps you build can use connected services. When the agent creates an app that needs Gmail or Slack, the platform tracks which services each app requires:

{
  "name": "Morning Briefing",
  "integrations": {
    "required": ["gmail", "google_calendar"],
    "optional": ["slack"]
  }
}

If a required service isn't connected, the platform tells you what's missing and how to connect it.

How It Works

User -> Shell (Settings UI / Conversation)
         |
    Matrix Gateway
         |
    Platform-owned Integration Layer
    - OAuth token management
    - Action execution
    - Credential storage
         |
    External Service APIs
    (Gmail API, GitHub API, Slack API, etc.)

Integration provider credentials stay on the platform. Customer workspaces call the platform integration layer through scoped Matrix routes, so apps and customer VPSes do not need raw provider secrets.

Error Handling

Common Workflows