OAuth Storage Providers
Connect cloud storage services like Google Drive, GitHub, Dropbox, and OneDrive through a secure OAuth flow. Once connected, storage tools for that provider are exposed to your agents and IDE through the MCP gateway.
Supported providers
| Provider | File types | Access scope |
|---|---|---|
| Google Drive | Docs, Sheets, PDFs, images | Read-only access to files you select or all files |
| GitHub | Repositories, code, issues, PRs | Read access to selected repositories |
| Dropbox | All file types | Read access to selected folders |
| OneDrive | Office docs, PDFs, images | Read access to selected folders |
How OAuth works
When you connect a provider, you're redirected to their authorization page where you grant Clevername specific permissions. Clevername receives an access token and refresh token, both stored encrypted. Access tokens are refreshed automatically when they expire — you only authorize once.
Token security
OAuth tokens are encrypted at rest using AES-256-GCM. Refresh tokens are used server-side only and never sent to the browser. If you disconnect a provider, all stored tokens are immediately deleted.
Open the Storage tab
Go to Dashboard → Integrations and select the Storage tab. You'll see cards for each supported storage provider with their connection status.
Connect a provider
Click Connect on the provider you want to add. You'll be redirected to the provider's OAuth authorization page.
Authorize access
On the provider's page, review the requested permissions and click Allow or Authorize. You'll be redirected back to Clevername automatically.
Verify the connection
After authorization, the provider card shows a green Connected status. Storage tools for that provider are now exposed to your agents and IDE through the MCP gateway.
To limit an agent to specific connections, open the agent's Access & Integrations settings, choose Edit Access, and tick the storage it may browse. Once any storage is picked, that agent sees only those connections.
Disconnect a provider
To revoke access, click Disconnect on the provider card. This deletes all stored tokens from Clevername. For complete revocation, also remove Clevername from the provider's authorized apps page (e.g., Google Account → Security → Third-party apps).