Integrations overview

Integrations let the Dema Agent use services such as Shopify, Slack, and Google Sheets in conversations and scheduled runs. You choose which integrations to connect and which actions to allow.

---

​

Supported integrations

​

Commerce & operations

​

Marketing

​

Analytics & experimentation

​

Data & spreadsheets

​

Communication & documents

​

Customer support

​

Content & data collection

---

​

Connecting an integration

Choose where to connect an integration based on which agent needs it: For an agent you created, reuse an existing connection or authorize a new one. The connection is available only to that agent until you link it elsewhere. Pick the integration and click Connect or Add, depending on the screen. The integration page shows which connection method it uses.

​

One-click connect

Select Connect, sign in to the service, and approve the requested access. Most integrations use this method.

​

Create an app at the vendor

Some services require an OAuth app. The guide for that integration includes the required settings:

1. Create the app in the service’s admin area.
2. Copy the client ID, client secret, and your account URL.
3. Paste the values into the Dema connect dialog.

​

API client credentials

Some services use API credentials instead of an interactive login. Create an API client in the service’s admin area, then copy its credentials into Dema.

---

​

Managing a connection

​

Removing or disconnecting an integration

• Unlink removes a connection from one agent. Open the agent and go to Configuration → Integrations.
• Disconnect deletes the connection everywhere it is used. Go to Agents → Settings → Integrations, find the connection, and click Disconnect.

See Your agents for more about agent-specific connections.

​

Revoking Dema’s access at the vendor

Disconnecting removes the credentials from Dema. To revoke the authorization at the service as well, use the service’s admin area:

• Look for a Connected apps or Authorized apps page.
• If you created an app for the integration, revoke or delete that app.

---

​

Best practices

​

Use a dedicated account for the agent

When an integration uses a user account, create a separate account for the agent instead of connecting your personal account. Give that account access only to the files, folders, properties, or ad accounts the agent needs. This approach works for Google Workspace, Google Ads, and other services that grant access at the account level. With a separate account:

• The agent cannot access unrelated content in your personal account.
• You can remove access without changing your own account.
• Audit logs show the agent under a separate identity.
• The connection remains available when a team member leaves.

​

Scope access to what the agent actually needs

Share only the resources the agent needs, such as one spreadsheet folder, ad account, or inbox label. You can grant more access later.

---

​

Security

• Dema uses stored credentials only when the agent calls the integration.
• Each integration guide lists the access Dema requests.
• Dema refreshes OAuth tokens automatically. If a refresh fails, the connection appears as expired and the agent stops using it. Reconnect from the same screen to restore access.

---

​

Tool permissions

Each integration exposes a mix of read and write tools.

• Read tools let the agent fetch data (for example, list Shopify orders or search Slack messages).
• Write tools let the agent make changes (for example, send a Slack message or update a customer tag).

The agent chooses a tool based on your request. For an agent you created, use Configuration → Tool permissions to require approval for sensitive actions. See Your agents.

---

​

Troubleshooting

If you are still stuck, contact support with the integration name and the error message you see.