Date: 2026-04-15 Area: agen-for-work/connectors/ Type: Documentation correction + tooling update
All 19 Agen for Work marketplace connector guides under agen-for-work/connectors/marketplace/ hardcode an incorrect OAuth Redirect URL:
https://api.frontegg.com/app-integrations/resources/integrations-callback/v1/dev-callback
https://api.us.frontegg.com/app-integrations/resources/integrations-callback/v1/dev-callbackThe correct Redirect URL is a single, tenant-specific value built from the tenant's MCP Gateway URL (described in agen-for-work/settings/overview.md):
https://<MCP Gateway URL>/integration-callbackWhen a custom domain is configured, the pattern becomes:
https://<custom_domain>/integration-callbackAdditionally:
- There is no shared reference page explaining how to construct this URL.
- Screenshots in the 19 guides show the wrong URL (typed into real provider UIs), so text fixes alone are insufficient — the screenshots must be re-captured.
- The
create-integration-docskill embeds the same wrong URLs in both its process instructions and its markdown template, so any future connector guide inherits the bug.
- Introduce a single source of truth describing how to get the Redirect URL.
- Replace hardcoded wrong URLs across all 19 marketplace guides with a placeholder that points users to the shared page.
- Re-capture all screenshots that show the Redirect URL value inside provider UIs.
- Update the
create-integration-docskill so it produces correct guides going forward. - Keep the change scoped to one PR, split into logical phased commits.
- No changes to
agen-for-work/settings/overview.mdcontent (only linking to it). - No restructuring of connector categories or sidebar groups beyond adding one entry.
- No changes to CIAM or other product documentation — this is Agen for Work only.
- No audit or rework of OAuth scopes in existing guides.
Purpose: single source of truth for how to construct the Redirect URL.
Structure:
## Get your Redirect URL— intro paragraph, explains the URL is needed when configuring OAuth applications in third-party services.### URL format— the formula:https://<MCP Gateway URL>/integration-callback### Find your MCP Gateway URL— short instruction: open Settings → Basic configuration, copy the MCP Gateway URL value. Link to../settings/overview.md. OneLightboxImagescreenshot of the Settings page with the MCP Gateway URL field highlighted.### Using a custom domain— if a custom domain is configured in Settings, use:Link to the custom-domain section ofhttps://<custom_domain>/integration-callbacksettings/overview.md.### Example— one realistic example using a placeholder tenant:https://your-tenant.mcp-gw.frontegg.com/integration-callback.
Formatting must satisfy scripts/check-content-style.mjs: first heading H2, subsequent H3+, sentence case, no emojis, → arrows.
Add one entry inside the Connectors group, above the Marketplace subgroup:
- label: Redirect URL
page: connectors/redirect-url.mdExact placement preserves existing Marketplace ordering.
Affected files (all under agen-for-work/connectors/marketplace/): asana, airtable, clickup, databricks, front, helpscout, hubspot, intercom, linkedin, monday, pagerduty, servicenow, shopify, surveymonkey, todoist, twitter, wordpress, zendesk, zoom.
For each file:
In the step titled "Configure redirect URI" / "Add redirect URL" (wording varies per provider), replace the two hardcoded URLs and any accompanying sentence like "If the service allows only one redirect URI, use the first one" with:
Enter your Frontegg Redirect URL: ``` https://<your-mcp-gateway-url>/integration-callback ```In the
### Additional resourcessection at the bottom of the file, add:- [How to get your Redirect URL](../redirect-url.md)
No other text or step-numbering changes.
For each connector, identify and regenerate every screenshot that visibly contains the Redirect URL value (typically in the provider's OAuth settings page after the URL has been pasted). Screenshots that only show the "Add redirect URL" button or an empty dialog are left untouched.
Rules (inherited from .claude/skills/create-integration-doc):
- Browser window fixed at 1920×1080.
- UI language English.
- Placeholder URL used when typing into provider UI:
https://your-tenant.mcp-gw.frontegg.com/integration-callback. Fallback: if the provider validates the URL and rejects the placeholder, use the real MCP Gateway URL of theintegrations@frontegg.comtest tenant and blur the tenant-specific subdomain prefix. - Existing rules for blur (secrets, emails, unrelated apps), highlight (red outline on key elements), and file naming (
{integration-id}-N.png) still apply. - Replace files in place at
agen-for-work/connectors/marketplace/images/{integration-id}-N.png.
Execute one connector per sub-task; validate the page renders correctly before moving to the next.
File: .claude/skills/create-integration-doc/SKILL.md (and referenced templates).
Changes:
- "OAuth Redirect URIs" default-settings section — replace the two hardcoded URLs with a single formula:Add a sentence: "See
Redirect URL format: https://<MCP Gateway URL>/integration-callbackagen-for-work/connectors/redirect-url.mdfor the canonical description — link to it from new guides." - Markdown template in Step 3.1 — rewrite the "Configure redirect URIs" sample step to match the new pattern (placeholder URL in a code block, no "if the service allows only one…" sentence).
- Additional resources section of the template — add the bullet:
- [How to get your Redirect URL](../redirect-url.md) - Screenshot guidance — add a note: when typing the Redirect URL into a provider's UI for screenshots, prefer
https://your-tenant.mcp-gw.frontegg.com/integration-callback; fall back to a real tenant URL only if the provider rejects the placeholder. - Sidebar update instruction — unchanged (entry still goes under Marketplace); explicitly note that
redirect-url.mdis a shared page, not a per-connector page, and must not be duplicated.
- Create
redirect-url.md+ Settings screenshot + sidebar entry. - Bulk text update in 19 marketplace guides (no screenshot changes).
- Update
create-integration-docskill (instructions + template). - Re-capture screenshots, one connector per commit (19 commits).
- Run validation:
npm run testandnpm run check:content-style.
npm run check:content-style— all 20 updated markdown files must pass.npm run test— Redocly lint must pass.- Manual spot-check: open
npm run devpreview, verify the new page renders, the sidebar entry appears, and at least 3 marketplace guides link correctly toredirect-url.md.
- Provider URL validation — some OAuth providers refuse obviously fake redirect URIs. Mitigation documented in §4 (fallback to real tenant URL with blur).
- Custom domain behaviour — the spec assumes the Redirect URL path (
/integration-callback) is identical under custom domain and default MCP Gateway URL. If backend behaviour differs, §1 needs a caveat. Confirm with backend team during phase 1 if uncertain. - Screenshot drift — providers occasionally redesign OAuth settings pages; re-captures may require small step-text tweaks. Handle per-connector during phase 4.