Open Source

Connection Security You Can Inspect

Leina calls apps within account authorization and team permissions. We publish key component code and documentation for developers to review access boundaries and help improve them. Credentials and business data remain subject to connection authorization.

Define the Boundaries of App Access

Leina’s connector calls use OpenConnector for authorization and execution. Account grants, member and group permissions, and the app’s own access rules define the available operations and data.

  1. Your Task

    Ask Leina to find information or prepare work in your team chat.

  2. Leina

    Understands the request and selects the app operations needed for the task.

  3. OpenConnector

    Handles credentials, access checks, and connector action execution.

  4. Authorized Apps

    Mail, documents, code, and business records, within the connected account’s permissions.

Leina organizes team tasks; OpenConnector handles connections and authorization. Raw account credentials stay within the connection runtime, while the agent uses authorized operations and results.

Our Contributions to the Open Source Community

Public code lets developers review connection and workflow implementations, reuse them in their products, and contribute improvements.

OpenConnector

Apache-2.0

An app connection gateway with credential handling, action discovery and execution, runtime access controls, and self-hosted deployment options.

View Source Code 5,989 GitHub Stars

OpenFlow

Apache-2.0

An open-source visual workflow platform in beta, with code and AI tasks, branches, human approval, and self-hosted execution. App actions use a connector runtime such as OpenConnector.

View Source Code 239 GitHub Stars

OO-CLI

MIT

A command-line toolkit that lets local agents discover, inspect, and call connector actions against hosted or self-hosted runtimes.

View Source Code 43 GitHub Stars

Connector SDK

MIT

A lightweight TypeScript HTTP client for calling the gateway from application code, inspecting the catalog, and using connector actions.

View Source Code 25 GitHub Stars

GitHub Star counts as of Oct 12, 2026.

Each public repository’s license defines its open-source scope. Third-party services and assets retain their own terms.

Public Implementation. Evidence for Trust.

Review the Security Mechanisms
Review credential handling, declared scopes, action schemas, and executor code. Use public implementation details to assess how a connection works.
Use It in Your Own Product
Run OpenConnector on your own infrastructure and connect an agent or application. Self-hosted operators configure storage, authentication, and their own OAuth apps.
Improve It Together
Report a reproducible issue, add an app action, or improve documentation. Public pull requests and release notes make changes and contributor credit visible.

Improving Connection Security with the Community

We maintain usable projects and a public place to review and improve them. These merged OpenConnector contributions show concrete improvements to permissions and authorization handling.

Gmail Access That Matches a Read-Only Task

A read-only integration can request Gmail’s read-only scope. The change separates user OAuth declarations from service-account scopes, preserving existing service-account grants.

Contributed by @bakey · merged into OpenConnector

Making Disconnects Take Effect

The community change checks authorization state before storing credentials, preventing an older authorization flow from restoring a disconnected connection. Regression coverage checks the behavior across storage backends.

Contributed by @powerfulZ · merged into OpenConnector

Explore Releases and Contributor Credits

Use the Foundation. Help It Grow.

For Your Team’s Work

Use Leina to work with the apps your team authorizes. Start with a clear task and review the result before expanding access.

Start Using Leina

For Your Agent or Product

Run OpenConnector, inspect an action, report an issue, or contribute code and documentation. The contribution guide explains the workflow and required checks.

Read the Contribution Guide Report a Security Issue Privately