Turn any OpenAPI or GraphQL API into tools for your AI agents

What is an API connector?

An OpenAPI document lists a REST API's operations, their parameters and the shape of each request. A GraphQL API describes its own schema when asked, through introspection. An API connector reads that description and turns each operation into a tool, so an agent can call the API without anyone writing code for it.

integrations.sh is an open source registry of the ways agents can reach a service: MCP servers, OpenAPI descriptions, GraphQL endpoints and command-line tools, grouped by domain, with notes on how each signs in. Services list themselves by publishing a /.well-known/integrations.json file.

What bots can do with API connectors in Ork

• Use a REST API from its OpenAPI description. Paste the document's URL, in JSON or YAML, and Ork turns every operation with an operationId into a tool, up to 100 per API.
• Use a GraphQL API from its endpoint. Ork introspects the schema and turns queries and mutations into tools, up to 100 per API.
• Authenticate with a bearer token or an API key header. The key is encrypted, never sent to the model, and removed from what the API sends back.
• Find an API by domain. When the operator points INTEGRATIONS_CATALOG_URL at an integrations.sh-compatible catalog, Search by domain adds a service's OpenAPI description or MCP server with the address and sign-in method filled in.
• Read without asking. A GET operation or a GraphQL query counts as reading, so in Ask mode it usually runs without a card. Writes ask first, under your approval settings.
• Share it. Every bot in the spaces you choose can use the connector. API connectors share one tool count with the MCP servers installed from Integrations: past 20 tools in total, a bot searches for the operations it needs instead of loading them all.

What API connectors cost

Ork adds nothing per call: API connectors are part of every plan on Ork Cloud. Self-hosting is free for permitted noncommercial use. Commercial use of new Ork work requires a paid license. integrations.sh is free and open source. The cost is whatever the API's owner charges for the calls your bot makes, under your own account and key, and it comes in three shapes.

Many business apps include API access in the plan you already pay for and limit how fast you can call it. Some services charge for each request or for what the request does, such as sending a text message. And your own company's APIs cost only the servers they run on. Either way the bill comes from the API's owner, on the terms of your account with them.

From GitHub's rate limit docs, HubSpot's usage guidelines and Twilio's US SMS pricing, checked November 2026.

• A worked example: a bot that texts 300 appointment reminders a month through Twilio spends about 300 × ($0.0083 + $0.0045) ≈ $3.84, plus the phone number's monthly fee. The same bot reading 2,000 HubSpot records a month costs nothing beyond your HubSpot plan, well inside its limits.
• The cost people miss is model tokens. Every response an API sends back goes into the bot's context and is billed as input by your model provider. Ork cuts responses at 1 MB, but asking for only the fields you need, through an operation's filters, saves more.
• Rate limits belong to your account or key, so several bots sharing one key share one limit. A bot that hits a limit gets the API's error and can wait and try again.
• Compared with a hosted platform: Composio charges from $0.30 to $10 per 1,000 calls past its free tier and Pipedream Connect starts at $99 a month, on top of the same API limits. An API connector skips that layer when a key is all you need.

API connector vs MCP server vs a hosted platform

When to choose API connectors

Choose an API connector when an app has a documented API and an API key, but no MCP server and no integration in the catalog. That covers many smaller SaaS tools and your company's own APIs, and needs no other service.

If the app publishes an MCP server, use that instead: its tools are written for agents and it can sign you in with OAuth. If the app needs an OAuth sign-in and has no MCP server, Composio or Pipedream handle that for you. The comparison covers all four.

Limits and security

• There is no OAuth sign-in for API connectors. Use an API key or a long-lived token; a token that expires has to be replaced by hand.
• An OpenAPI document must list a server URL, give operations an operationId and be under 2 MB. Only the first 100 operations are imported, and request bodies are JSON.
• A GraphQL API must allow introspection. Larger schemas are cut to 100 operations, split between queries and mutations.
• APIs must be at public addresses. Localhost and private networks are refused unless the operator sets MCP_ALLOW_PRIVATE_ENDPOINT=true on the API and worker, which allows them for every user. Cloud metadata addresses stay blocked.
• The Settings form sends a key as a bearer token or a header. Connectors installed through Ork's API can also put it in the URL as a query parameter, so avoid that for sensitive keys. Redirects aren't followed, each call has 30 seconds and responses over 1 MB are cut short.

How to set it up

Anyone with an account can add an API connector, on Ork Cloud or a self-hosted server. The catalog search is an optional setting for the admin of a self-hosted Ork. See Connect apps and the tools and integrations guide.

1. Find the API's OpenAPI document or GraphQL endpoint in its developer docs or on integrations.sh.
2. Open Integrations from Connect apps at the bottom of the sidebar, choose +, then OpenAPI or GraphQL.
3. Paste the URL, choose No auth, Bearer token or API key header, enter the key, and choose Verify and add.
4. Ask a bot to use the API, and approve any call that changes something.
5. Optionally, an admin sets INTEGRATIONS_CATALOG_URL on the API to https://integrations.sh or a compatible mirror to turn on Search by domain.