Tools vs Data sources: Data sources sync knowledge into Realm so agents
can search and reference it. Tools let agents act outward by performing
actions in external systems.
Available tools
Realm includes tools for popular workplace apps:HubSpot
Salesforce
GitHub
Slack
Freshdesk
Gong
Zendesk
Google BigQuery
Google Sheets
Google Drive
Microsoft 365
Vitally
Gmail
Google Calendar
Outlook
Built-in tools
Two tools are available out of the box with no setup required:Connection scope
Each tool uses one of two connection scopes. For organization-scoped tools, everyone in the workspace uses the same connection with the same permissions as whoever authenticated the tool. If you want specific access rights, you can create a dedicated account for Realm.Some tools support only one scope. Gmail, Google Calendar, and
Outlook are personal-only (each user connects their own account).
Slack and Vitally are organization-only (one shared connection for the
whole workspace).
Enabling a Tool
1
Navigate to Tools
Go to Agents > Tools or Settings > Tools in the sidebar.
2
Find the tool
Browse the Available section for the tool you want to enable.
3
Configure the tool
Click Configure or Enable on the tool.
4
Choose scope
Select Organization or Personal as the connection scope. Some tools support only one scope, so the selector is hidden. Gmail, Google Calendar, and Outlook are personal-only. Slack and Vitally are organization-only.
5
Authenticate
Click Connect or Connect for everyone to connect the tool.For GitHub, GitHub may show Request or Install and request when an organization owner must approve the Realm GitHub Agent. Realm remains disconnected while approval is pending. After an owner installs the app, return to Realm and connect GitHub again.
Managing tools
Once a tool is enabled, click Configure to manage its actions, settings, and connections.Actions
Each tool exposes individual actions (e.g. “Create Ticket”, “Update Contact”). You can toggle specific actions on or off to control exactly what agents are allowed to do with a tool.Per-agent configuration
For more details on how tools work within agents, see the User guide:
Agents.
Parameter overrides let you lock down specific parameters:
Some actions also include behavior settings. For Slack’s post-message action,
turn off Summary thread for long messages if you want long messages posted
directly instead of as a short parent message with the full content in a thread.
Settings
Each tool has a Settings section with configuration options. Admin Only toggles the tool so only admins can see and use it. This is useful for tools that perform sensitive operations. Microsoft Admin Consent is available for Microsoft tools like Outlook and Microsoft 365. Click Grant Admin Consent to grant consent for all users in your Microsoft tenant. This removes individual consent prompts, so users can connect the tool without going through Microsoft’s approval flow themselves.Changing scope
You can switch a tool between Organization and Personal scope after it’s been enabled.Disabling a Tool
Disabling a tool removes all connections and makes it unavailable across the workspace. You can re-enable it at any time.Connections
View all active connections for a tool, including:- Who is connected
- Connection status
- Option to remove individual connections
An organization-scope connection is shared by everyone in the workspace and
runs on a single Salesforce login. Consider authenticating with a dedicated
Salesforce integration user with a scoped permission set rather than a
personal account. The Connections list is where you verify which account
is in use.
Google file picker
For Google Drive and Google Sheets tool connections, the Connections list includes a Pick files button. Use this when you want to authorize specific Google files for an existing tool connection. When you click Pick files, Realm opens the Google Picker using the credentials from that connection. You can choose one or more files from Google Drive, and Realm stores those selections on the connector for later tool use. For the Google Sheets tool, pick every spreadsheet that agents need to read or update. Connecting Google Sheets authorizes the account, but the spreadsheets still need to be selected with Pick files before agents can update them through the Google Sheets tool. The same applies to the Google Drive tool and existing Google Docs documents. Agents can always update documents they created themselves, but any document that already existed has to be selected with Pick files before an agent can write to it.The picker uses the permissions of the connected Google account. It does not
grant access to files the account cannot already open in Google Drive.
1
Open the tool
Go to Agents > Tools or Settings > Tools, then open Google Drive or Google Sheets.
2
Find the connection
In the Connections section, locate the connection you want to update.
3
Pick files
Click Pick files. Google Picker will open in a popup window.
4
Choose files
Select one or more files from Google Drive, then confirm the selection. For Google Sheets updates, select the spreadsheets the agent should be allowed to update. For Google Docs edits or full replacements, select the documents the agent should be allowed to change.
5
Save to the connection
Realm adds the selected files to that connection immediately. If you use the picker again later, the new selection is merged with the files already stored on the connector.
MCP Servers
MCP (Model Context Protocol) is a protocol for connecting agents to external tools and data sources. You can add custom MCP servers to extend what your agents can do.MCP servers are not available on trial plans.
Adding a Server
1
Open MCP settings
Click Add MCP Server from the Tools page. You can either connect a Featured MCP Server with one click, or add a custom server manually.
2
Enter server URL
Provide the URL of the MCP server. Use the server’s own documentation when
possible. As a rule of thumb, a URL ending in
/mcp usually uses
Streamable HTTP, while one ending in /sse usually uses Server-Sent Events.3
Choose transport type
Select Streamable HTTP or Server-Sent Events (SSE) to match the
server.
4
Configure authentication
Choose OAuth, Bearer Token, or Custom Headers and enter the
required credentials. You can add headers such as
x-api-key or vendor
version headers. The Authorization header is managed separately by the
authentication type.5
Name the connection
Optionally give the connection a descriptive name. This is useful when connecting to the same server multiple times with different credentials.
6
Add the server
Click Connect to complete the setup.
Featured servers
Realm highlights these featured MCP servers for quick one-click setup:Asana
Atlassian
Intercom
Linear
Notion
Sentry
Stripe
Webflow
Managing servers
Once added, you can reconnect or delete MCP servers from the Tools page.Troubleshooting
Salesforce: OAuth Error When Connecting
When connecting the Salesforce tool, Salesforce may show an OAuth Error page saying that it cannot authorize you and reportingOAUTH_APPROVAL_ERROR_GENERIC. It may describe the failure only as an
unexpected authentication error and tell you to try again or contact your
Salesforce administrator.
This is typically caused by a recent Salesforce security change that requires connected apps to be explicitly installed before they can be used. You can confirm this is the issue by checking the URL in your browser’s address bar. If it contains error=invalid_client&error_description=app+must+be+installed+into+org, then the Realm app needs to be installed in your Salesforce org.
To fix this:
1
Open Salesforce Setup
Log in to Salesforce as an admin and go to Setup > Connected Apps OAuth Usage.
2
Install the Realm app
Find the Realm app in the list and click Install.
3
Reconnect in Realm
Return to Realm and try connecting the Salesforce tool again.