Corsair

Corsair is an open-source, Apache 2.0-licensed integration layer that connects AI agents and software products to 200+ third-party apps like Gmail, Slack, GitHub, and Notion. Built on a strongly typed TypeScript SDK and REST API, it handles OAuth, multi-tenant credential encryption, rate limits, and webhook verification so developers write integrations once and reuse them across any AI framework or backend, without being locked into MCP alone.

Corsair is an open source product integration platform built to eliminate “integration debt” — the hidden engineering cost of manually wiring every AI agent or application to third-party SaaS APIs. Instead of rebuilding OAuth flows, token refresh loops, rate limit handling, and webhook verification for every new tool, developers connect once through Corsair’s unified, strongly typed TypeScript SDK and reuse that integration everywhere.

What we make: Corsair ships with 200+ pre-built, strongly typed plugins (Slack, Gmail, GitHub, Notion, HubSpot, Stripe, Google Workspace, and more), a local database caching layer that avoids hitting live API rate limits, and a standardized 3-tool pattern (list_operations, get_schema, run_script) that exposes every integration to AI agents through the Model Context Protocol, without flooding the model’s context window.

Who we serve: AI agent developers building on frameworks like the Claude Agent SDK, OpenAI Agents SDK, LangChain, and Mastra; B2B SaaS teams that need multi tenant OAuth and credential isolation for their customers; and internal engineering teams automating workflows across GitHub, Slack, Notion, and Google Workspace.

What makes us different: Corsair is “more than MCP.” While many integration tools are strictly built for AI model tool-calling, Corsair runs on a REST API foundation so the same integration layer powers autonomous agents, backend microservices, and customer-facing dashboards from a single codebase. We’re also fully open source (Apache 2.0) and self-hostable: credentials are encrypted with envelope encryption under your own key, and even our managed Hosted Hub never stores a copy of your users’ access tokens. Built-in human-in-the-loop approval gates mean sensitive actions sending emails, deleting records, issuing payments require explicit sign-off before they ever reach the provider.

• Open source (Apache 2.0) and fully self-hostable — your credentials and data never leave your own infrastructure.
• One unified TypeScript SDK for 200+ integrations — connect AI agents or apps to Slack, Gmail, GitHub, HubSpot, and more without rebuilding OAuth, rate limits, or webhooks for each one.
• Zero secret exposure to LLMs, with multi-tenant credential isolation and human-in-the-loop approval gates for sensitive actions like sending emails or deleting records.

Location shown on map (New York, United States). Exact address is shared after you connect.