Connector
Your AI, reading your OctoFlow
The OctoFlow connector lets the assistant you already pay for, Claude, ChatGPT, Gemini or Grok, answer questions from your own OctoFlow account. Who has gone quiet. What is due today. What you know about an account before the call. One address works in all four. You add it, sign in to OctoFlow once, press Allow, and you are done. It comes with the Ultra plan.
Want OctoFlow's own assistant instead? That is OctoAI, and the two work side by side.
1Add OctoFlow in your assistant
The address is the same everywhere:
https://app.octoflowus.com/mcp| Assistant | Where to add it |
|---|---|
| Claude | Customize, then Connectors, then Add, and paste the address. Or search for OctoFlow in the connector directory under Discover. |
| ChatGPT | Settings, then Apps, and add a custom app with the address (a paid plan). Or find OctoFlow in the app directory at chatgpt.com/apps. |
| Gemini | Settings, then Connected apps, then Add custom app, and paste the address. On Google Workspace your admin may need to allow it first. |
| Grok | Settings, then Connectors, then Custom MCP, and paste the address. |
2Sign in and press Allow
The assistant opens a tab on app.octoflowus.com. Sign in with your OctoFlow email and PIN if you are not already, read what it will be able to see, and press Allow. You land back in the assistant and it is connected. There is no key to copy and nothing to paste.
Ask it something: who have I not spoken to in a while? or what is due today? If it answers from your own accounts, it is working.
3What it can read, and what it cannot do
- Your mind maps: accounts and contacts, with their green, yellow or red.
- Calls, emails, meetings and LinkedIn touches you logged.
- Email opens, clicks and website visits on mail you sent.
- Sequences, OctoMail campaigns, deals and what is due today.
It is read only. It cannot send email, log activity or change anything in OctoFlow. It never sees your personal notes, and never another user's data. A manager on a team plan sees a rep only after that rep turns on sharing. The answers go to the assistant you connected, under that provider's terms.
4Disconnect
Remove OctoFlow inside the assistant, or press Disconnect all on the connector card in OctoFlow under Settings → Integrations, which cuts off every assistant at once. Access tokens expire after an hour on their own and the long lived connection after 90 days, so a forgotten connection does not live forever.
5For IT and security teams
- Standard OAuth 2.1: authorization code with PKCE, dynamic client registration, metadata at
app.octoflowus.com/.well-known/oauth-authorization-serverand/.well-known/oauth-protected-resource. - Tokens are opaque, stored hashed on the server, and scoped to the user who approved them. Refresh tokens rotate on use.
- Every tool is read only and declares it. No tool sends, writes or deletes.
- Desktop tools that cannot sign in can use an API key from Settings instead, with the same address in an Authorization header.
- The rest of OctoFlow's security posture is on the security page.