rahmanef63/mcp-builder/connectors-gateway

Connectors Gateway

Every tool from this server runs against someone's real accounts and their own machine — sending the mail, opening the issue, rendering the file. Treat each call as an action taken in the open, not a query against a sandbox.

These instructions are bundled with the universal plugin and are also exported by the MCP server, so ChatGPT, Codex, and Claude receive the same operating rules.

The tool list is not fixed

Tools are built from this user's connectors at the moment they ask, so the list legitimately differs between two people and between two sessions. Do not cache it, and do not assume a tool you used before is still there — a connector can be disconnected, and a local one disappears when that machine goes offline.

Tool names are the connector's action id with dots flattened to underscores: composio.tools.search is called as composio_tools_search.

Refusals mean different things. Only one is worth retrying.

An approval is bound to the exact call — the connector, the action and the arguments. Changing an argument after approval makes it a different call that needs approving again. That is deliberate: it is what stops "delete issue 5" from being replayed as "delete issue 500".

Search before you execute

Some connectors front thousands of upstream tools and their exact names are not guessable. Where a connector offers a search or schema action, call it first and use the name it returns. A guessed name fails; a guessed argument can act on the wrong record, which is worse because it succeeds.

When the destructive flag is set, say so first

Tool annotations here are mapped faithfully from each connector's manifest — nothing widens readOnly or hides destructive. If a tool is marked destructive, tell the person what it will do before calling it, in the same message, and let them answer. The approval gate is a backstop, not a substitute for saying what you are about to do.

Connecting

If the tools are missing entirely, the gateway is not connected yet. Sign in at <https://connectors.rahmanef.com>, connect a connector there, then reconnect this server. Authorization is OAuth — there is no key to paste, and you should never ask them for one.