Tools vs Data sources: Data sources sync knowledge into Realm so agents can search and reference it. Tools let agents act outward by performing actions in external systems.
Available tools
Realm includes tools for popular workplace apps:HubSpot
Salesforce
GitHub
Slack
Freshdesk
Gong
Zendesk
Google BigQuery
Google Sheets
Google Drive
Vitally
Gmail
Google Calendar
Outlook
Built-in tools
Two tools are available out of the box with no setup required:| Tool | Description |
|---|---|
| Send emails to Realm users | |
| HTTP Request | Send HTTP requests to external APIs and webhooks. Target APIs may still require their own authentication (e.g. headers or tokens). |
Connection scope
Each tool uses one of two connection scopes. For organization-scoped tools, everyone in the workspace uses the same connection with the same permissions as whoever authenticated the tool. If you want specific access rights, you can create a dedicated account for Realm.| Scope | Description |
|---|---|
| Organization | A single shared connection used by everyone in the workspace. An admin authenticates once and all users can use the tool. |
| Personal | Each user connects their own account. Actions are performed on behalf of the individual user. |
Some tools are personal-only: Gmail, Google Calendar, and Outlook always require each user to connect their own account.
Enabling a Tool
Choose scope
Select Organization or Personal as the connection scope. Some tools (like Gmail, Google Calendar, and Outlook) only support personal connections. The scope button won’t be visible, and instead it will say “Enable for users to connect”.
Managing tools
Once a tool is enabled, click Configure to manage its actions, settings, and connections.Actions
Each tool exposes individual actions (e.g. “Create Ticket”, “Update Contact”). You can toggle specific actions on or off to control exactly what agents are allowed to do with a tool.
Per-agent configuration
For more details on how tools work within agents, see the User guide: Agents.
| Mode | Behavior |
|---|---|
| On | The agent can use this action freely |
| Off | The action is disabled for this agent |
| Ask first | The agent must get user confirmation before running the action |
| Override | Behavior |
|---|---|
| Preset parameters | Lock a parameter to a specific value (e.g. always send to a specific Slack channel) |
| Hidden parameters | Hide a parameter from the model so it can’t be changed or seen by the agent |
Settings
Each tool has a Settings section with configuration options.
Changing scope
You can switch a tool between Organization and Personal scope after it’s been enabled.Disabling a Tool
Disabling a tool removes all connections and makes it unavailable across the workspace. You can re-enable it at any time.Connections
View all active connections for a tool, including:- Who is connected
- Connection status
- Option to remove individual connections
MCP Servers
MCP (Model Context Protocol) is a protocol for connecting agents to external tools and data sources. You can add custom MCP servers to extend what your agents can do.MCP servers are not available on trial plans.
Adding a Server
Open MCP settings
Click Add MCP Server from the Tools page. You can either connect a Featured MCP Server with one click, or add a custom server manually.
Configure authentication
Choose OAuth or Bearer Token and enter the required credentials. You can also add custom headers (e.g.
x-api-key or vendor version headers). The Authorization header is managed separately by the authentication type.Name the connection
Optionally give the connection a descriptive name. This is useful when connecting to the same server multiple times with different credentials.
Featured servers
Realm highlights several popular MCP servers for quick one-click setup:Atlassian
Intercom
Linear
Notion
Sentry
Stripe
Managing servers
Once added, you can reconnect or delete MCP servers from the Tools page.Troubleshooting
Salesforce: OAuth Error When Connecting
When connecting the Salesforce tool, you may see an OAuth error page like this:
error=invalid_client&error_description=app+must+be+installed+into+org, then the Realm app needs to be installed in your Salesforce org.
To fix this:
Open Salesforce Setup
Log in to Salesforce as an admin and go to Setup > Connected Apps OAuth Usage.
Admin vs user permissions
| Capability | Admin | Regular User |
|---|---|---|
| Enable/disable tools | Yes | No |
| Change connection scope | Yes | No |
| Set admin-only restriction | Yes | No |
| Grant Microsoft Admin Consent | Yes | No |
| View all connections | Yes | No |
| Connect personal-auth tools | Yes | Yes |
| View enabled tools | Yes | Yes |
| Manage own connections | Yes | Yes |