Skip to content

OpenMausBot 0.1.22

Choose a tag to compare

@milind-soni milind-soni released this 17 Aug 06:35

Connecting apps needed two different keys and the setup screen asked for the wrong one, so fresh installs could not connect anything at all. Now it is a single project key, pasted once.

Connected apps

  • One Composio project key (ak_…) replaces the old two-key Connect flow. Paste it once in App Settings → Connections, then connect Gmail, GitHub, Slack or anything else from Connected apps — authentication happens in your normal browser (#165)
  • The key is validated before it is saved, so a wrong paste tells you immediately instead of failing later at connect time (#165)
  • Toolkit status, browser auth links, disconnect and revoke all move to Composio's current Sessions APIs, and a deleted Session is recovered automatically rather than leaving connected apps stuck (#165)
  • Disconnect now revokes the grant with the upstream provider, instead of only forgetting it locally (#165)
  • Stale fields from the old Connect setup are cleaned up when a packaged app upgrades (#165)

Where your credentials live

  • Provider OAuth tokens stay in Composio. OpenMausBot keeps only its own project key and non-secret Session identifiers
  • In the packaged desktop app the project key is encrypted with the operating system credential store rather than sitting in the JSON config
  • Running from source, set COMPOSIO_API_KEY in the server environment

Also

  • Settings drops to a single Composio credential
  • New self-hosting guide at docs/composio.md, including the least-privilege scoped-key permissions if you would rather not use a default project key