Connectors · 23 governed integrations
Not what your AI can talk to.
What it can actually do.
Each connector below is a policy shim in front of one service's Model Context Protocol tools: it evaluates every call against your policy before the underlying API is ever touched, and signs a Decision Receipt whether the call is allowed, denied, or held for a human. Deleting a Kubernetes namespace, refunding a Stripe charge, and isolating a CrowdStrike host all produce the same kind of receipt. The service changes; the governance and the proof do not.
Every shim below is verified in-house; maturity varies by connector, ask us about yours.
Looking for which AI clients (Claude Desktop, Cursor, Aider) can point at a SynOI gateway? That list is on the compatibility page. This page is the other side: the services your AI agent can be governed to take real action on.
DevOps & Infra
Source control, CI/CD, orchestration, and the local filesystem.
GitHub
@synoi/mcp-shim-github
Force-push and default-branch changes always require approval; repo deletion is hard-denied unless explicitly permitted.
GitHub (Octokit adapter)
@synoi/mcp-shim-github-octokit
Reference adapter that wires the GitHub shim to real GitHub API calls over PAT, GitHub App, or OAuth user token.
GitLab
@synoi/mcp-shim-gitlab
Default-branch protection and force-push detection across a three-tier allowlist: instance, group, project.
Kubernetes
@synoi/mcp-shim-kubernetes
Hard-gates namespace deletion and node drain; protects production namespaces from destructive changes.
Terraform
@synoi/mcp-shim-terraform
Hard-gates destroy and force-unlock; protects production workspaces; holds locked-state operations.
CircleCI
@synoi/mcp-shim-circleci
Hard-gates SSH-key creation; pipeline triggers against protected branches and production contexts require approval.
LaunchDarkly
@synoi/mcp-shim-launchdarkly
Flag toggles in production environments require approval; project deletion is hard-denied by default.
Filesystem
@synoi/mcp-shim-filesystem
Read, write, edit, and delete against an allowlist of roots; rejects path-traversal and symlink-escape before any I/O.
Observability & Security
Monitoring, error tracking, and endpoint security.
Datadog
@synoi/mcp-shim-datadog
Blocks muting or deleting a production-tagged monitor unless the tag is explicitly allowlisted; caps mute duration.
Sentry
@synoi/mcp-shim-sentry
Mass resolve, ignore, or delete operations above a threshold escalate to approval; project deletion is hard-denied.
CrowdStrike
@synoi/mcp-shim-crowdstrike
Hard-gates host isolation and Real-Time-Response command execution; production-host operations require approval.
Collaboration
Messaging, docs, issue tracking, and ITSM.
Slack
@synoi/mcp-shim-slack
Protected-channel posts escalate to approval; DM reads require explicit consent; admin actions require approval by default.
Slack (Web API adapter)
@synoi/mcp-shim-slack-webapi
Reference adapter that wires the Slack shim to a real bot token over plain fetch, no SDK dependency.
Notion
@synoi/mcp-shim-notion
Protected pages (Compliance, Security, Board, HR) escalate to approval; database deletion is hard-denied; DLP scanning on writes.
Linear
@synoi/mcp-shim-linear
Sev-1 label and urgent-priority changes escalate to approval; project archive always requires approval.
Jira
@synoi/mcp-shim-jira
Release, approve, and deploy-style workflow transitions require approval; bulk updates above threshold escalate.
ServiceNow
@synoi/mcp-shim-servicenow
Protected workflows (Production, Emergency Change, Major Incident) and closing transitions require approval.
Identity & Access
Who can do what, on your infrastructure and your workforce apps.
AWS IAM
@synoi/mcp-shim-aws-iam
Hard-gates access-key creation and any operation on the root account; admin-policy attachment requires approval.
Okta
@synoi/mcp-shim-okta
Hard-gates user deletion and MFA factor reset; adding a member to an admin group is held for approval.
Data & CRM
Databases, customer records, and money movement.
PostgreSQL
@synoi/mcp-shim-postgres
Classifies every SQL statement by AST shape, not regex; TRUNCATE, DROP, and unscoped DELETE/UPDATE are denied by default.
Salesforce
@synoi/mcp-shim-salesforce
Record deletion is hard-gated; protected object types and high-value account owners escalate to approval.
Stripe
@synoi/mcp-shim-stripe
Amount-cap gates on every money-out verb; livemode calls escalate to approval by default; customer deletion is denied.
Comms
The mailbox, governed the same way as everything else.
@synoi/mcp-shim-email
Archive and label run freely; send and destructive actions escalate to human approval; permanent delete is denied by default.
Any of the 23. Same signed receipt trail.
This is the concrete proof of “govern any execution”: it is not a slogan about AI, it is 23 real services behind one policy engine.