> ## Documentation Index > Fetch the complete documentation index at: https://docs.dema.ai/llms.txt > Use this file to discover all available pages before exploring further. # Integrations overview > Connect the Dema Agent to third-party tools it can use in conversations and scheduled runs. Integrations let the Dema Agent use services such as Shopify, Slack, and Google Sheets in conversations and scheduled runs. You choose which integrations to connect and which actions to allow. *** ## Supported integrations ### Commerce & operations ### Marketing ### Analytics & experimentation ### Data & spreadsheets ### Communication & documents ### Customer support ### Content & data collection *** ## Connecting an integration Choose where to connect an integration based on which agent needs it: | Agent | Where to connect it | | ---------------------- | ----------------------------------------------------------- | | The built-in assistant | **Agents → Settings → Integrations** | | An agent you created | Open the agent, then go to **Configuration → Integrations** | For an agent you created, reuse an existing connection or authorize a new one. The connection is available only to that agent until you link it elsewhere. Pick the integration and click **Connect** or **Add**, depending on the screen. The integration page shows which connection method it uses. ### One-click connect Select **Connect**, sign in to the service, and approve the requested access. Most integrations use this method. ### Create an app at the vendor Some services require an OAuth app. The guide for that integration includes the required settings: 1. Create the app in the service's admin area. 2. Copy the client ID, client secret, and your account URL. 3. Paste the values into the Dema connect dialog. ### API client credentials Some services use API credentials instead of an interactive login. Create an API client in the service's admin area, then copy its credentials into Dema. Each integration guide lists what you need before you connect. *** ## Managing a connection ### Removing or disconnecting an integration * **Unlink** removes a connection from one agent. Open the agent and go to **Configuration → Integrations**. * **Disconnect** deletes the connection everywhere it is used. Go to **Agents → Settings → Integrations**, find the connection, and click **Disconnect**. See [Your agents](/guides/agent/your-agents#integrations) for more about agent-specific connections. ### Revoking Dema's access at the vendor Disconnecting removes the credentials from Dema. To revoke the authorization at the service as well, use the service's admin area: * Look for a **Connected apps** or **Authorized apps** page. * If you created an app for the integration, revoke or delete that app. *** ## Best practices ### Use a dedicated account for the agent When an integration uses a user account, create a separate account for the agent instead of connecting your personal account. Give that account access only to the files, folders, properties, or ad accounts the agent needs. This approach works for Google Workspace, Google Ads, and other services that grant access at the account level. With a separate account: * The agent cannot access unrelated content in your personal account. * You can remove access without changing your own account. * Audit logs show the agent under a separate identity. * The connection remains available when a team member leaves. Treat the agent account like any other service account. Use a strong password, enable 2FA, and limit who can sign in. ### Scope access to what the agent actually needs Share only the resources the agent needs, such as one spreadsheet folder, ad account, or inbox label. You can grant more access later. *** ## Security * Dema uses stored credentials only when the agent calls the integration. * Each integration guide lists the access Dema requests. * Dema refreshes OAuth tokens automatically. If a refresh fails, the connection appears as expired and the agent stops using it. Reconnect from the same screen to restore access. *** ## Tool permissions Each integration exposes a mix of **read** and **write** tools. * **Read tools** let the agent fetch data (for example, list Shopify orders or search Slack messages). * **Write tools** let the agent make changes (for example, send a Slack message or update a customer tag). The agent chooses a tool based on your request. For an agent you created, use **Configuration → Tool permissions** to require approval for sensitive actions. See [Your agents](/guides/agent/your-agents#tool-permissions). *** ## Troubleshooting Make sure you are signed in with an account that has permission to approve third-party apps or install integrations. If your organization restricts third-party app installs, ask an admin to complete the connection for you. This happens when Dema cannot refresh the access token, usually because you revoked access at the vendor or rotated credentials. Click **Reconnect** on the integration card to re-authorize. For integrations that require an account URL or MCP URL, the value must be an HTTPS URL pointing at your own tenant. Double-check the format shown in the input placeholder and that it matches your vendor account. The scopes Dema requests may have expanded since you first connected. Disconnect and reconnect the integration to approve the new scopes. If you are still stuck, contact [support](mailto:info@dema.ai) with the integration name and the error message you see.